Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Mozilla Firefox for iOS 123 Clear all filters
TI-2024-17365 CVE-2024-26281 · GHSA-7hw4-x97q-5wx2

Cross-site scripting in Mozilla Firefox for iOS

Priority LOW 21

Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the current top origin sites in the URL bar.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00313 Published 2024-02-22 Fixed in 123 CWE-79
TI-2024-17366 CVE-2024-26282 · GHSA-g386-c6xv-h62r

Cross-site scripting in Mozilla Firefox for iOS

Priority LOW 31

Using an AMP url with a canonical element, an attacker could have executed JavaScript from an opened bookmarked page.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00336 Published 2024-02-22 Fixed in 123 CWE-80