CVE-2024-26284

2024-02-2215:15:08

[email protected]

web.nvd.nist.gov

cve-2024-26284

attacker

universal cross-site scripting

redirect

focus for ios

AI Score

5.6

Confidence

High

EPSS

Percentile

9.0%

JSON

Utilizing a 302 redirect, an attacker could have conducted a Universal Cross-Site Scripting (UXSS) on a victim website, if the victim had a link to the attacker’s website. This vulnerability affects Focus for iOS < 123.

References

bugzilla.mozilla.org/show_bug.cgi?id=1860075

www.mozilla.org/security/advisories/mfsa2024-10/