CVE-2025-3035 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-3035 Interim 1 5 2025-07-12T06:57:32Z current 2025-04-02T23:14:52Z 2025-07-12T06:57:32Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-3035 By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability affects Firefox < 137. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ETNHULRLMLJHZBIZIPSURXJNK2JZWDQP/ E-Mail link for openSUSE-SU-2025:14971-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15-LTSS openSUSE Tumbleweed MozillaFirefox MozillaFirefox-137.0-1.1 MozillaFirefox-branding-upstream-137.0-1.1 MozillaFirefox-devel MozillaFirefox-devel-137.0-1.1 MozillaFirefox-translations-common MozillaFirefox-translations-common-137.0-1.1 MozillaFirefox-translations-other MozillaFirefox-translations-other-137.0-1.1 MozillaFirefox-137.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-branding-upstream-137.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-devel-137.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-translations-common-137.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-translations-other-137.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox as a component of SUSE Linux Enterprise Server 11 SP4 LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP2-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP2-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP4-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP4-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15-LTSS By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability affects Firefox < 137. CVE-2025-3035 openSUSE Tumbleweed:MozillaFirefox-137.0-1.1 openSUSE Tumbleweed:MozillaFirefox-branding-upstream-137.0-1.1 openSUSE Tumbleweed:MozillaFirefox-devel-137.0-1.1 openSUSE Tumbleweed:MozillaFirefox-translations-common-137.0-1.1 openSUSE Tumbleweed:MozillaFirefox-translations-other-137.0-1.1 important