CVE-2025-4215

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.63.3b17 is able to address this issue. The patch is identified as eaedaf5b10d2f7857c6b77fbf7d4a80681d4d46c. It is recommended to upgrade the affected component.

Database specific

{
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/4xxx/CVE-2025-4215.json",
    "cwe_ids": [
        "CWE-1333",
        "CWE-400"
    ]
}

References

Affected packages

Git / github.com/gorhill/ublock

Affected ranges

Type: GIT
Repo: https://github.com/gorhill/ublock
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

6cc63d825e030b88fb9e90b2efe4eedef1c69b69

Affected versions

0.*

0.1.0.2

0.2.0.0

0.2.0.1

0.2.1.0

0.2.1.1

0.2.1.2

0.2.2.0

0.2.2.1

0.2.3.0

0.2.3.1

0.2.3.2

0.2.3.3

0.2.3.4

0.2.3.5

0.3.0.0

0.3.0.1

0.3.0.2

0.3.1.0

0.3.1.1

0.3.1.2

0.3.1.3

0.3.2.0

0.3.2.1

0.3.2.2

0.3.2.3

0.4.0.0

0.4.0.1

0.5.0.0

0.5.0.1

0.5.1.0

0.5.2.0

0.5.3.0

0.5.5.0

0.5.5.1

0.5.5.2

0.5.6.0

0.6.0.0

0.6.0.1

0.6.1.0

0.6.2.0

0.6.3.0

0.6.3.1

0.6.3.2

0.6.3.3

0.6.4.0

0.6.5.0

0.6.6.0

0.7.0.0

0.7.0.1

0.7.0.10

0.7.0.11

0.7.0.2

0.7.0.3

0.7.0.4

0.7.0.5

0.7.0.6

0.7.0.7

0.7.0.8

0.7.0.9

0.7.2.0

0.7.2.1

0.8.1.2

0.8.2.0

0.8.2.1

0.8.2.2

0.8.2.3

0.8.5.0

0.8.5.1

0.8.5.2

0.8.5.3

0.8.5.4-beta.0

0.8.5.5

0.8.5.6

0.8.6.0

0.8.7.0

0.8.8.0

0.8.8.1

0.8.8.2

0.8.8.3

0.8.8.4

0.8.9.0

0.8.9.1

0.9.0.0

0.9.1.0

0.9.2.0

0.9.2.1

0.9.3.0

0.9.4.0

0.9.4.1

0.9.4.2

0.9.4.3

0.9.4.4

0.9.4.5

0.9.5.0

0.9.6.0

0.9.7.0

0.9.7.5

0.9.8.0

0.9.8.1

0.9.8.2

0.9.8.3

0.9.8.5

0.9.8.6

0.9.9.0

0.9.9.1

0.9.9.2

1.*

1.0.0.0

1.0.0.1

1.1.0.0

1.1.0.1

1.1.1

1.10.0

1.10.2

1.11.0

1.11.2

1.12.0

1.12.1

1.13.0

1.13.10

1.13.2

1.13.4

1.13.8

1.14.0

1.14.12

1.14.14

1.14.20

1.14.22

1.14.4

1.14.6

1.14.8

1.15.0

1.15.12

1.15.14

1.15.16

1.15.18

1.15.2

1.15.20

1.15.22

1.15.24

1.15.4

1.16.0

1.16.10

1.16.12

1.16.14

1.16.2

1.16.4

1.16.6

1.17.0

1.17.4

1.18.0

1.18.10

1.18.12

1.18.14

1.18.16

1.18.2

1.18.4

1.18.6

1.18.8

1.19.0

1.2.0

1.2.1

1.20.0

1.21.0

1.22.0

1.23.0

1.24.0

1.25.0

1.25.2

1.26.0

1.27.0

1.28.0

1.29.0

1.3.0

1.3.1

1.3.2

1.3.3

1.3.4

1.30.0

1.31.0

1.32.0

1.33.0

1.34.0

1.35.0

1.35.2

1.36.0

1.37.0

1.38.0

1.38.7b10

1.38.7b11

1.38.7b12

1.38.7b13

1.38.7b14

1.38.7b15

1.38.7b16

1.38.7b17

1.38.7b18

1.38.7b19

1.38.7b20

1.38.7b21

1.38.7b22

1.38.7b23

1.38.7b24

1.38.7b25

1.38.7b26

1.38.7b27

1.38.7b3

1.38.7b4

1.38.7b5

1.38.7b6

1.38.7b7

1.38.7b8

1.38.7b9

1.38.7rc0

1.38.7rc1

1.38.7rc2

1.38.7rc3

1.38.7rc4

1.39.0

1.39.1b0

1.39.1b1

1.39.1rc0

1.39.2

1.39.3b0

1.39.3b1

1.39.3b10

1.39.3b11

1.39.3b12

1.39.3b13

1.39.3b2

1.39.3b3

1.39.3b4

1.39.3b5

1.39.3b6

1.39.3b7

1.39.3b8

1.39.3b9

1.39.3rc0

1.39.3rc1

1.4.0

1.40.0

1.40.1b0

1.40.2

1.40.3b0

1.40.3b1

1.40.3b2

1.40.3b3

1.40.5b0

1.40.5b1

1.40.5b2

1.40.9b0

1.40.9b1

1.40.9b10

1.40.9b11

1.40.9b2

1.40.9b3

1.40.9b4

1.40.9b5

1.40.9b6

1.40.9b7

1.40.9b8

1.40.9b9

1.40.9rc0

1.40.9rc1

1.40.9rc2

1.40.9rc3

1.40.9rc4

1.41.0

1.41.1b0

1.41.1b2

1.41.2

1.41.3b0

1.41.3b1

1.41.3b2

1.41.5b0

1.41.5b1

1.41.5b2

1.41.7b0

1.41.7b1

1.41.7b2

1.41.7b3

1.41.9b0

1.41.9b1

1.41.9b2

1.41.9b3

1.41.9b4

1.41.9rc0

1.41.9rc1

1.41.9rc2

1.41.9rc3

1.42.0

1.42.1b0

1.42.1b1

1.42.1b2

1.42.3b0

1.42.5b0

1.42.5b1

1.42.5b2

1.42.5b3

1.42.5rc0

1.42.5rc1

1.43.0

1.43.1b0

1.43.1b1

1.43.1b10

1.43.1b2

1.43.1b3

1.43.1b4

1.43.1b5

1.43.1b6

1.43.1b7

1.43.1b8

1.43.1b9

1.43.1rc0

1.43.1rc1

1.43.1rc2

1.43.1rc3

1.44.0

1.44.1b0

1.44.1b1

1.44.1b2

1.44.1b3

1.44.1b4

1.44.3b0

1.44.3b1

1.44.3b10

1.44.3b11

1.44.3b12

1.44.3b2

1.44.3b3

1.44.3b4

1.44.3b5

1.44.3b6

1.44.3b7

1.44.3b8

1.44.3b9

1.44.5b0

1.44.5b1

1.44.5b10

1.44.5b11

1.44.5b12

1.44.5b13

1.44.5b14

1.44.5b15

1.44.5b16

1.44.5b17

1.44.5b18

1.44.5b19

1.44.5b2

1.44.5b20

1.44.5b21

1.44.5b3

1.44.5b4

1.44.5b5

1.44.5b6

1.44.5b7

1.44.5b8

1.44.5b9

1.44.5rc0

1.44.5rc1

1.44.5rc2

1.44.5rc3

1.44.5rc4

1.45.0

1.45.1b0

1.45.1b1

1.45.3b0

1.45.3b1

1.45.3b10

1.45.3b11

1.45.3b12

1.45.3b13

1.45.3b14

1.45.3b15

1.45.3b16

1.45.3b2

1.45.3b3

1.45.3b4

1.45.3b5

1.45.3b6

1.45.3b7

1.45.3b8

1.45.3b9

1.45.3rc0

1.45.3rc1

1.45.3rc2

1.45.3rc3

1.45.3rc4

1.45.3rc5

1.45.3rc6

1.46.0

1.46.1b0

1.46.1b1

1.46.1b11

1.46.1b12

1.46.1b13

1.46.1b14

1.46.1b15

1.46.1b16

1.46.1b17

1.46.1b18

1.46.1b2

1.46.1b3

1.46.1b4

1.46.1b5

1.46.1b6

1.46.1b7

1.46.1b8

1.46.1b9

1.46.1rc0

1.47.0

1.47.1b0

1.47.1b1

1.47.3b0

1.47.3b1

1.47.3b2

1.47.3b3

1.47.3b4

1.47.3b5

1.47.3b6

1.47.5b0

1.47.5b1

1.47.5b10

1.47.5b11

1.47.5b12

1.47.5b13

1.47.5b2

1.47.5b3

1.47.5b4

1.47.5b5

1.47.5b6

1.47.5b7

1.47.5b8

1.47.5b9

1.47.5rc0

1.47.5rc1

1.47.5rc2

1.47.5rc3

1.47.5rc4

1.47.5rc5

1.47.5rc6

1.47.5rc7

1.48.0

1.48.1b0

1.48.1b1

1.48.1b2

1.48.1b3

1.48.1b4

1.48.1b5

1.48.1b6

1.48.1b7

1.48.1b8

1.48.1b9

1.48.3b0

1.48.3b1

1.48.3b2

1.48.3b3

1.48.3b4

1.48.5b0

1.48.5b1

1.48.5b10

1.48.5b2

1.48.5b3

1.48.5b4

1.48.5b5

1.48.5b6

1.48.5b7

1.48.5b8

1.48.5b9

1.48.9b0

1.48.9b1

1.48.9b2

1.48.9rc0

1.48.9rc1

1.49.0

1.49.1b0

1.49.1b1

1.49.1b2

1.49.1b3

1.49.1b4

1.49.1b5

1.49.1b6

1.49.1b7

1.49.1b8

1.49.3b0

1.49.3b1

1.49.3b10

1.49.3b11

1.49.3b12

1.49.3b13

1.49.3b14

1.49.3b15

1.49.3b16

1.49.3b17

1.49.3b18

1.49.3b19

1.49.3b2

1.49.3b20

1.49.3b3

1.49.3b4

1.49.3b5

1.49.3b6

1.49.3b7

1.49.3b8

1.49.3b9

1.49.3rc0

1.49.3rc1

1.49.3rc10

1.49.3rc11

1.49.3rc12

1.49.3rc13

1.49.3rc14

1.49.3rc15

1.49.3rc16

1.49.3rc2

1.49.3rc3

1.49.3rc4

1.49.3rc5

1.49.3rc6

1.49.3rc7

1.49.3rc8

1.49.3rc9

1.5.0

1.5.1

1.5.3

1.50.0

1.50.1b0

1.50.1b1

1.50.1b10

1.50.1b11

1.50.1b12

1.50.1b13

1.50.1b14

1.50.1b15

1.50.1b16

1.50.1b17

1.50.1b2

1.50.1b3

1.50.1b4

1.50.1b5

1.50.1b6

1.50.1b7

1.50.1b8

1.50.1b9

1.50.1rc0

1.50.1rc1

1.50.1rc2

1.50.1rc3

1.51.0

1.51.1b0

1.51.1b1

1.51.1b10

1.51.1b11

1.51.1b12

1.51.1b13

1.51.1b14

1.51.1b15

1.51.1b16

1.51.1b17

1.51.1b18

1.51.1b19

1.51.1b2

1.51.1b20

1.51.1b21

1.51.1b22

1.51.1b23

1.51.1b3

1.51.1b4

1.51.1b5

1.51.1b6

1.51.1b7

1.51.1b8

1.51.1b9

1.51.1rc0

1.51.1rc1

1.51.1rc2

1.51.1rc3

1.51.1rc4

1.51.1rc5

1.52.0

1.52.1b0

1.52.1b1

1.52.1b2

1.52.1b3

1.52.1b4

1.52.3b0

1.52.3b1

1.52.3b10

1.52.3b11

1.52.3b12

1.52.3b13

1.52.3b14

1.52.3b15

1.52.3b16

1.52.3b17

1.52.3b2

1.52.3b3

1.52.3b4

1.52.3b5

1.52.3b6

1.52.3b7

1.52.3b8

1.52.3b9

1.52.3rc0

1.52.3rc1

1.52.3rc10

1.52.3rc11

1.52.3rc12

1.52.3rc13

1.52.3rc14

1.52.3rc15

1.52.3rc16

1.52.3rc2

1.52.3rc3

1.52.3rc4

1.52.3rc5

1.52.3rc6

1.52.3rc7

1.52.3rc8

1.52.3rc9

1.53.1b0

1.53.1b1

1.53.1b2

1.53.1b3

1.53.1b4

1.53.1b5

1.53.1b6

1.53.1b7

1.53.1b8

1.53.1b9

1.53.1rc0

1.53.1rc1

1.53.1rc2

1.53.1rc3

1.53.1rc4

1.53.1rc5

1.53.3rc0

1.53.3rc1

1.53.5rc0

1.53.5rc1

1.53.5rc10

1.53.5rc11

1.53.5rc12

1.53.5rc13

1.53.5rc2

1.53.5rc3

1.53.5rc4

1.53.5rc5

1.53.5rc6

1.53.5rc7

1.53.5rc8

1.53.5rc9

1.54.0

1.54.1b0

1.54.1b1

1.54.1b10

1.54.1b11

1.54.1b12

1.54.1b13

1.54.1b14

1.54.1b15

1.54.1b16

1.54.1b17

1.54.1b18

1.54.1b19

1.54.1b2

1.54.1b20

1.54.1b21

1.54.1b3

1.54.1b4

1.54.1b5

1.54.1b6

1.54.1b7

1.54.1b8

1.54.1b9

1.54.1rc0

1.54.1rc1

1.54.1rc2

1.55.0

1.55.1b0

1.55.1b1

1.55.1b10

1.55.1b11

1.55.1b12

1.55.1b13

1.55.1b14

1.55.1b15

1.55.1b16

1.55.1b17

1.55.1b18

1.55.1b19

1.55.1b2

1.55.1b20

1.55.1b21

1.55.1b22

1.55.1b23

1.55.1b24

1.55.1b25

1.55.1b26

1.55.1b27

1.55.1b28

1.55.1b3

1.55.1b4

1.55.1b5

1.55.1b6

1.55.1b7

1.55.1b8

1.55.1b9

1.55.1rc0

1.55.1rc1

1.55.1rc2

1.55.1rc3

1.55.1rc4

1.55.1rc5

1.56.0

1.56.1b0

1.56.1b1

1.56.1b10

1.56.1b11

1.56.1b12

1.56.1b13

1.56.1b14

1.56.1b15

1.56.1b16

1.56.1b17

1.56.1b18

1.56.1b2

1.56.1b3

1.56.1b4

1.56.1b5

1.56.1b6

1.56.1b7

1.56.1b8

1.56.1b9

1.56.1rc0

1.56.1rc1

1.56.1rc2

1.56.1rc3

1.56.1rc4

1.56.1rc5

1.57.0

1.57.1b0

1.57.1b1

1.57.1b2

1.57.1b3

1.57.3b0

1.57.3b1

1.57.3b10

1.57.3b2

1.57.3b3

1.57.3b4

1.57.3b5

1.57.3b6

1.57.3b7

1.57.3b8

1.57.3b9

1.57.3rc0

1.57.3rc1

1.58.0

1.58.1b0

1.58.1b1

1.58.1b10

1.58.1b11

1.58.1b12

1.58.1b2

1.58.1b3

1.58.1b4

1.58.1b5

1.58.1b6

1.58.1b7

1.58.1b8

1.58.1b9

1.58.1rc0

1.58.1rc1

1.58.1rc10

1.58.1rc11

1.58.1rc2

1.58.1rc3

1.58.1rc4

1.58.1rc5

1.58.1rc6

1.58.1rc7

1.58.1rc8

1.58.1rc9

1.59.0

1.59.1b0

1.59.1b1

1.59.1b10

1.59.1b11

1.59.1b12

1.59.1b13

1.59.1b14

1.59.1b15

1.59.1b16

1.59.1b17

1.59.1b18

1.59.1b19

1.59.1b2

1.59.1b20

1.59.1b21

1.59.1b22

1.59.1b3

1.59.1b4

1.59.1b5

1.59.1b6

1.59.1b7

1.59.1b8

1.59.1b9

1.59.1rc0

1.59.1rc1

1.59.1rc2

1.59.1rc3

1.59.1rc4

1.59.1rc5

1.59.1rc6

1.59.1rc7

1.6.0

1.6.1

1.6.2

1.6.3

1.6.4

1.6.6

1.6.8

1.60.0

1.60.1b0

1.60.1b1

1.60.1b10

1.60.1b11

1.60.1b12

1.60.1b13

1.60.1b14

1.60.1b15

1.60.1b16

1.60.1b17

1.60.1b2

1.60.1b3

1.60.1b4

1.60.1b5

1.60.1b6

1.60.1b7

1.60.1b8

1.60.1b9

1.60.1rc0

1.60.1rc1

1.60.1rc2

1.60.1rc3

1.60.1rc4

1.60.1rc5

1.61.0

1.61.1b0

1.61.1b1

1.61.1b2

1.61.1b3

1.61.1b4

1.61.1b5

1.61.3b0

1.61.3b1

1.61.3b10

1.61.3b11

1.61.3b2

1.61.3b3

1.61.3b4

1.61.3b5

1.61.3b6

1.61.3b7

1.61.3b8

1.61.3b9

1.61.3rc0

1.61.3rc1

1.61.3rc2

1.61.3rc3

1.62.0

1.62.1b0

1.62.1b1

1.62.1b2

1.62.1b3

1.62.1b4

1.62.1b5

1.62.1b6

1.62.1rc0

1.62.1rc1

1.62.1rc2

1.62.1rc3

1.63.0

1.63.1b0

1.63.1b1

1.63.2

1.63.3b0

1.63.3b1

1.63.3b10

1.63.3b11

1.63.3b12

1.63.3b13

1.63.3b14

1.63.3b15

1.63.3b16

1.63.3b2

1.63.3b3

1.63.3b4

1.63.3b5

1.63.3b6

1.63.3b7

1.63.3b8

1.63.3b9

1.7.0

1.7.2

1.7.4

1.7.6

1.8.0

1.9.0

1.9.12

1.9.16

1.9.2

1.9.4

1.9.6

1.9.8

npm_0.*

npm_0.1.11

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-4215.json"