CVE-2024-26283

2024-02-2214:56:43

mozilla

github.com

vulnerability

unauthorized scripts

firefox

AI Score

5.8

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme. This vulnerability affects Firefox for iOS < 123.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:mozilla:firefox:-:*:*:*:*:iphone_os:*:*"
    ],
    "vendor": "mozilla",
    "product": "firefox",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "123",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:mozilla:firefox:-:*:*:*:*:ipados:*:*"
    ],
    "vendor": "mozilla",
    "product": "firefox",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "123",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]