CVE-2025-47241

Description

In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the authority component.

Category

4.0
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.04%
Affected: browser-use browser-use
Published at:
Updated at:

References

Link Tags
https://github.com/browser-use/browser-use/security/advisories/GHSA-x39x-9qw5-ghrf
https://github.com/browser-use/browser-use/releases/tag/0.1.45
https://github.com/browser-use/browser-use/pull/1561

Frequently Asked Questions

What is the severity of CVE-2025-47241?
CVE-2025-47241 has been scored as a medium severity vulnerability.
How to fix CVE-2025-47241?
To fix CVE-2025-47241, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2025-47241 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2025-47241 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2025-47241?
CVE-2025-47241 affects browser-use browser-use.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.