Security Vulnerabilities fixed in Focus for iOS 122 — Mozilla

2024-02-1900:00:00

Mozilla Foundation

www.mozilla.org

javascript uri

unauthorized scripts

custom firefox scheme

timeout race condition

AI Score

Confidence

Low

EPSS

Percentile

9.0%

JSON

An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme and a timeout race condition.

References

bugzilla.mozilla.org/show_bug.cgi?id=1863831