Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-43112
HistoryAug 06, 2024 - 4:15 p.m.

CVE-2024-43112

2024-08-0616:15:49
Debian Security Bug Tracker
security-tracker.debian.org
2
cross-site scripting
download link
firefox ios
vulnerability

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

17.7%

Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129.

OSVersionArchitecturePackageVersionFilename
Debian999allfirefox< 130.0.1-1firefox_130.0.1-1_all.deb

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

17.7%