Design/Logic Flaw

2021-08-0520:15:00

PRIOn knowledge base

www.prio-n.com

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.0%

JSON

Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. Exploiting the vulnerability requires the user to click on a specially crafted, seemingly legitimate URL containing an embedded malicious redirect while using F-Secure Safe Browser for iOS.

CPENameOperatorVersion
safelt18.4.272901

CPE	Name	Operator	Version
	safe	lt	18.4.272901

References

www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame

www.f-secure.com/en/business/support-and-downloads/security-advisories

www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33596