CVE-2024-1563

2024-02-2215:15:08

mozilla

web.nvd.nist.gov

5274

cve-2024-1563

unauthorized scripts

javascript uri

custom firefox scheme

timeout race condition

focus for ios

AI Score

6.2

Confidence

Low

EPSS

Percentile

9.0%

JSON

An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme and a timeout race condition. This vulnerability affects Focus for iOS < 122.

Affected configurations

Vulners

Node

mozillafocusRange≤122android

VendorProductVersionCPE
mozillafocus*cpe:2.3:a:mozilla:focus:*:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
mozilla	focus	*	cpe:2.3:a:mozilla:focus::::::android::*

CNA Affected

[
  {
    "product": "Focus for iOS",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "122",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]