CVE-2024-43111 | THREATINT

Assigner	mozilla
Reserved	2024-08-05
Published	2024-08-06
Updated	2024-08-07

Description

Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129.

Problem types

iOS Firefox allows to run javascript with download

Product status

Any version before 129

affected

Credits

James Lee

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1874907

https://www.mozilla.org/security/advisories/mfsa2024-36/

cve.org CVE-2024-43111

nvd.nist.gov CVE-2024-43111

Download JSON

https://cve.threatint.com/CVE/CVE-2024-43111

Subscribe to our newsletter to learn more about our work.