CVE-2024-0606
Assigner: mozilla
Published: 2024-01-22T18:23:25.606Z
State: PUBLISHED
affected: product: Focus for iOS
vendor: Mozilla
versions: lessThan: 122
status: affected
version: unspecified
versionType: custom
descriptions: value: An attacker could execute unauthorized script on a legitimate site through UXSS using window.open() by opening a javascript URI leading to unauthorized actions within the user's loaded webpage. This vulnerability affects Focus for iOS < 122.
supportingMedia: type: text/html
base64: no
value: An attacker could execute unauthorized script on a legitimate site through UXSS using window.open() by opening a javascript URI leading to unauthorized actions within the user's loaded webpage. This vulnerability affects Focus for iOS < 122.
problemTypes: descriptions: description: UXSS attack with window.open()
type: text
credits: value: James Lee