CVE-2024-31393

Description

Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security protections This vulnerability affects Firefox for iOS < 124.

Reserved 2024-04-02 | Published 2024-04-03 | Updated 2024-11-22 | Assigner mozilla

Problem types

Javascript URLs would load when dragged to address bar

Product status

Any version before 124
affected

Credits

Muneaki Nishimura

References

bugzilla.mozilla.org/show_bug.cgi?id=1879739

www.mozilla.org/security/advisories/mfsa2024-17/

cve.org (CVE-2024-31393)

nvd.nist.gov (CVE-2024-31393)

Download JSON