CVE-2024-1563
Assigner: mozilla
Published: 2024-02-22T14:56:42.888Z
State: PUBLISHED
affected: product: Focus for iOS
vendor: Mozilla
versions: lessThan: 122
status: affected
version: unspecified
versionType: custom
descriptions: value: An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme and a timeout race condition. This vulnerability affects Focus for iOS < 122.
supportingMedia: type: text/html
base64: no
value: An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme and a timeout race condition. This vulnerability affects Focus for iOS < 122.
problemTypes: descriptions: description: UXSS exploit using a timeout after externally opening the application from a custom Focus scheme
type: text
credits: value: James Lee