CVE-2024-26281

2024-02-2215:15:08

[email protected]

web.nvd.nist.gov

javascript

uri

scanning

vulnerability

firefox

ios

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the current top origin sites in the URL bar. This vulnerability affects Firefox for iOS < 123.

References

bugzilla.mozilla.org/show_bug.cgi?id=1868005

www.mozilla.org/security/advisories/mfsa2024-08/