Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL safety checks This vulnerability affects Focus for iOS < 132.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1863832 | Issue Tracking Permissions Required |
| https://www.mozilla.org/security/advisories/mfsa2024-60/ | Vendor Advisory |
Configurations
History
04 Nov 2024, 13:34
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Mozilla firefox Focus
Mozilla |
|
| CPE | cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:iphone_os:*:* | |
| CWE | NVD-CWE-noinfo | |
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1863832 - Issue Tracking, Permissions Required | |
| References | () https://www.mozilla.org/security/advisories/mfsa2024-60/ - Vendor Advisory |
29 Oct 2024, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-29 13:15
Updated : 2025-03-13 20:15
NVD link : CVE-2024-10474
Mitre link : CVE-2024-10474
JSON object : View
Products Affected
mozilla
- firefox_focus
CWE