PT-2020-6744

Name of the Vulnerable Software and Affected Versions Mozilla Firefox for iOS versions prior to 28 Description The issue is related to insufficient access control in the WKUserScript function used for loading in Mozilla Firefox for iOS. This could allow a remote attacker to load arbitrary files. ...

PT-2020-6727

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 28 Description The issue is related to insufficient protection of registration data, allowing a rogue webpage to override the injected WKUserScript used by the logins autofill. This could result in leaking a...

CVE-2020-12404

For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnerability affects Firefox for iOS 26...

CVE-2020-12414

IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted when leaving private mode. This vulnerability affects Firefox for iOS 27...

CVE-2020-12404

For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnerability affects Firefox for iOS 26...

CVE-2020-12414: Incomplete Cleanup

IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted when leaving private mode. This vulnerability affects Firefox for iOS 27...

CVE-2020-12404: Improper Neutralization of Input During Web Page Generation

For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnerability affects Firefox for iOS 26...

PT-2020-13103

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 26 Description The issue arises from the native-to-JS bridging mechanism in the app, which requires a unique token to prevent non-app code from calling bridging functions. However, this token can potentially...

PT-2020-13107

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 27 Description The issue arises from the incorrect use of the API for WKWebViewConfiguration in private browsing mode, leading to IndexedDB not being cleared when the mode is exited. This requires the private...

CVE-2020-6830

For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...

CVE-2020-6830

For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...

Code injection

For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...

CVE-2020-6830

For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...

CVE-2020-6830: Exposure of Sensitive Information to an Unauthorized Actor

For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...

PT-2020-5579

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 25 Description The issue is related to the implementation of window.webkit in the Firefox web browser for iOS, which involves the disclosure of information about the SECURITY TOKEN. This could allow a remote...