CVE-2024-1563

2024-02-2214:56:42

mozilla

github.com

javascript

firefox

ios

vulnerability

race condition

top origin sites

unauthorized scripts

AI Score

6.4

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme and a timeout race condition. This vulnerability affects Focus for iOS < 122.

CNA Affected

[
  {
    "vendor": "Mozilla",
    "product": "Focus for iOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "122",
        "versionType": "custom"
      }
    ]
  }
]