CVE-2024-53975

Description

Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar to, misleadingly, appear secure. This vulnerability affects Firefox for iOS < 133.

Reserved 2024-11-25 | Published 2024-11-26 | Updated 2024-11-27 | Assigner mozilla

Problem types

SSL security padlock icon could be visually spoofed to look secure on an HTTP page

Product status

Any version before 133
affected

Credits

James Lee

References

bugzilla.mozilla.org/show_bug.cgi?id=1843467

www.mozilla.org/security/advisories/mfsa2024-66/

cve.org (CVE-2024-53975)

nvd.nist.gov (CVE-2024-53975)

Download JSON