Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2025-4215 Details

Description

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.63.3b17 is able to address this issue. The patch is identified as eaedaf5b10d2f7857c6b77fbf7d4a80681d4d46c. It is recommended to upgrade the affected component.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:3.7 LOWVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CNA: [email protected]CVSS-B:3.1 LOWVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/gorhill/uBlock/commit/eaedaf5b10d2f7857c6b77fbf7d4a80681d4d46c	CISA-ADP	ExploitPatch
https://lists.debian.org/debian-lts-announce/2025/06/msg00013.html	CVE	Mailing List
https://github.com/gorhill/uBlock/commit/eaedaf5b10d2f7857c6b77fbf7d4a80681d4d46c	[email protected]	ExploitPatch
https://github.com/gorhill/uBlock/releases/tag/1.63.3b17	[email protected]	Release Notes
https://vuldb.com/?ctiid.307194	[email protected]	Permissions RequiredVDB Entry
https://vuldb.com/?id.307194	[email protected]	Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.562301	[email protected]	Third Party AdvisoryVDB Entry

see all 7 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-1333	Inefficient Regular Expression Complexity	[email protected]
CWE-1333	Inefficient Regular Expression Complexity	[email protected]
CWE-400	Uncontrolled Resource Consumption	[email protected]

Affected Products

Product	Versions
ublockorigin ublock origin	< 1.63.3 1.63.3 beta1 1.63.3 beta10 1.63.3 beta11 1.63.3 beta12
CPE cpe:2.3:a:ublockorigin:ublock_origin:::::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta1:::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta10:::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta11:::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta12:::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta13:::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta14:::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta15:::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta16:::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta2:::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta3:::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta4:::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta5:::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta6:::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta7:::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta8:::::: cpe:2.3:a:ublockorigin:ublock_origin:1.63.3:beta9:::::: Remediation No remediation found in references.
debian debian linux	11.0
CPE cpe:2.3:o:debian:debian_linux:11.0:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2025	Initial Analysis	[email protected]
Jun 12, 2025	CVE Modified	CVE
May 5, 2025	CVE Modified	CISA-ADP
May 2, 2025	New CVE Received	[email protected]