How severe is CVE-2025-4089?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5.1 out of 10.

What type of vulnerability is CVE-2025-4089?

This is classified as CWE-77, which is a common weakness in software security.

CVE-2025-4089

MEDIUM Year: 2025

CVSS v3 Score

5.1

Medium

Weakness Type

CWE-77

View all →

Vulnerability Description

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 138 and Thunderbird < 138.

CVE-2020-5299

MEDIUM

CVSS:5.1(Medium)

In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, any users with the ability to modify any data that could eventually be exported as a CSV file from the `Impor...

CWE-772020

CVE-2024-40070

MEDIUM

CVSS:5.1(Medium)

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_generator/classes/Users.php?f=save. This vulnerability allows attackers to execute...

CWE-772024

CVE-2024-57212

MEDIUM

CVSS:5.1(Medium)

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the action_reboot function.

CWE-772024

CVE-2025-20117

MEDIUM

CVSS:5.1(Medium)

A vulnerability in the CLI of Cisco APIC could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. To exploit th...

CWE-772025