Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Mozilla Focus for iOS 122 Clear all filters
TI-2024-00561 CVE-2024-0606 · GHSA-p52c-9f7h-pxpj

Cross-site scripting in Mozilla Focus for iOS

Priority LOW 29

An attacker could execute unauthorized script on a legitimate site through UXSS using window.open() by opening a javascript URI leading to unauthorized actions within the user's loaded webpage.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00283 Published 2024-01-22 Fixed in 122 CWE-79
TI-2024-00560 CVE-2024-0605 · GHSA-wph3-4v72-8x34

Race condition in Mozilla Focus for iOS

Priority LOW 35

Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin sites in urlbar.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00387 Published 2024-01-22 Fixed in 122 CWE-362