Lucene search

K
cvelistMozillaCVELIST:CVE-2023-49060
HistoryNov 21, 2023 - 2:28 p.m.

CVE-2023-49060

2023-11-2114:28:55
mozilla
www.cve.org
vulnerability
ex-filtrating
security key
readermode
referrerpolicy
internal pages
data

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the referrerpolicy attribute. This vulnerability affects Firefox for iOS < 120.

CNA Affected

[
  {
    "product": "Firefox for iOS",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "120",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%