Lucene search
HistorySep 03, 2024 - 8:15 p.m.
CVE-2024-8399
websites
javascript
spoof
url
focus
ios
CVSS3
4.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
EPSS
0.001
Percentile
17.7%
Websites could utilize Javascript links to spoof URL addresses in the Focus navigation bar This vulnerability affects Focus for iOS < 130.
Affected configurations
Node
mozillafirefox_focusRange<130.0iphone_os
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox_focus | * | cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:iphone_os:*:* |
Related
cvelist
cvelist
CVE-2024-8399
2024-09-03 20:07:38
vulnrichment
vulnrichment
CVE-2024-8399
2024-09-03 20:07:38
mozilla
mozilla
Security Vulnerabilities fixed in Focus for iOS 130 — Mozilla
2024-09-03 00:00:00
cve
cve
CVE-2024-8399
2024-09-03 20:15:09
CVSS3
4.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
EPSS
0.001
Percentile
17.7%
Related for NVD:CVE-2024-8399