CVE-2024-1563

2024-02-2215:15:08

[email protected]

web.nvd.nist.gov

attack

javascript

uri

vulnerability

focus for ios

timeout

AI Score

6.1

Confidence

Low

EPSS

Percentile

9.0%

JSON

An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme and a timeout race condition. This vulnerability affects Focus for iOS < 122.

References

bugzilla.mozilla.org/show_bug.cgi?id=1863831

www.mozilla.org/security/advisories/mfsa2024-09/