CVE-2024-5022

Description

The file scheme of URLs would be hidden, resulting in potential spoofing of a website's address in the location bar This vulnerability affects Focus for iOS < 126.

Reserved 2024-05-16 | Published 2024-05-17 | Updated 2024-10-28 | Assigner mozilla

Problem types

URLs with file scheme could have been used to spoof addresses in the location bar

Product status

Any version before 126
affected

Credits

James Lee

References

bugzilla.mozilla.org/show_bug.cgi?id=1874560

www.mozilla.org/security/advisories/mfsa2024-24/

cve.org (CVE-2024-5022)

nvd.nist.gov (CVE-2024-5022)

Download JSON