CVE-2024-31392

2024-04-0300:00:00

ubuntu.com

firefox

insecure element

secure icon

mixed content

security status

vulnerability

ios

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

If an insecure element was added to a page after a delay, Firefox would not
replace the secure icon with a mixed content security status This
vulnerability affects Firefox for iOS < 124.

Notes

Author	Note
tyhicks	mozjs contains a copy of the SpiderMonkey JavaScript engine
mdeslaur	starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap firefox for ios only