1980808 - (CVE-2025-11718) Spoofing address bar using visibilitychange when address bar is hidden

Status: RESOLVED FIXED

(Firefox for Android :: General, defect, P2)

Description

[Hafiizh]

Attachment: spooffirefox.mp4

When the address bar is hidden after scrolling and then moving to another application and returning to Firefox, the address bar does not reappear, causing a spoof on the address bar. This is different from Chrome, which reappears the address bar when returning to Chrome when the address bar is hidden and then moving to another application.

steps to reproduce

1. open https://you-can-billowy-nimble-login-secure-docs-google-source-attacker.com/spooffif1.html
2. scroll down
3. switch to other application
4. back again to firefox

OS: Android 15
Device: Samsung A56

Comment 1

[Hafiizh]

Attachment: spooffif1.html

Comment 2

[[:skhan]]

Taking a look. Solution would be to make our address bar visible when coming back to foreground

Comment 3

[Rhodwell Malicdem [:RJ]]

Attachment: (secure)

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/6f06075862a8
https://hg.mozilla.org/integration/autoland/rev/b4c7d06f2acc
Show search toolbar after returning to Firefox r=android-reviewers,skhan

Comment 5

[Ryan VanderMeulen [:RyanVM]]

https://hg-edge.mozilla.org/mozilla-central/rev/b4c7d06f2acc

Comment 6

[BugBot [:suhaib / :marco]]

The patch landed in nightly and beta is affected.
:RJ, is this bug important enough to require an uplift?

• If yes, please nominate the patch for beta approval.
  • See https://wiki.mozilla.org/Release_Management/Requesting_an_Uplift for documentation on how to request an uplift.
• If no, please set status-firefox143 to wontfix.

For more information, please visit BugBot documentation.

Comment 7

[Daniel Veditz [:dveditz]]

Unfortunately spoofing bugs less than sec-high are no longer eligible for a bug bounty

Comment 8

[Hafiizh]

thank you.
if this bug gets a cve can the credit be given to:
hafiizh (https://www.linkedin.com/in/hafiizh-7aa6bb31) & kang ali (https://www.linkedin.com/in/mohammad-ali-syarief)?

Comment 9

[Tom Ritter [:tjr]]

Yes

Comment 10

[Daniel Veditz [:dveditz]]

Attachment: advisory.txt

Comment 11

[Hafiizh]

Hi daniel can the credit be given to:
hafiizh (https://www.linkedin.com/in/hafiizh-7aa6bb31) & kang ali (https://www.linkedin.com/in/mohammad-ali-syarief)?

Comment 12

[Tom Ritter [:tjr]]

Yes, Will update momentarily.