CVE-2024-26283

2024-02-2215:15:08

Debian Security Bug Tracker

security-tracker.debian.org

javascript uri

external url

custom firefox scheme

vulnerability

ios

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme. This vulnerability affects Firefox for iOS < 123.

OSVersionArchitecturePackageVersionFilename
Debian999allfirefox< 127.0.2-1firefox_127.0.2-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	999	all	firefox	< 127.0.2-1	firefox_127.0.2-1_all.deb