Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-0605

Published: 22/01/2024 Updated: 30/01/2024
CVSS v3 Base Score: 7.5 | Impact Score: 5.9 | Exploitability Score: 1.6
VMScore: 0
Subscribe to Mozilla

Vulnerability Summary

Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin sites in urlbar. This bypasses security measures, potentially leading to arbitrary code execution or unauthorized actions within the user's loaded webpage. This vulnerability affects Focus for iOS < 122.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox focus

Vendor Advisories

Mozilla: Security Vulnerabilities fixed in Focus for iOS 122
Mozilla Foundation Security Advisory 2024-03 Security Vulnerabilities fixed in Focus for iOS 122 Announced January 22, 2023 Impact critical Products Focus for iOS Fixed in Focus for iOS 122 ...

References

CWE-362https://bugzilla.mozilla.org/show_bug.cgi?id=1855575https://www.mozilla.org/security/advisories/mfsa2024-03/https://nvd.nist.govhttps://www.mozilla.org/en-US/security/advisories/mfsa2024-03/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook