Vulnerability Details CVE-2024-0606
An attacker could execute unauthorized script on a legitimate site through UXSS using window.open() by opening a javascript URI leading to unauthorized actions within the user's loaded webpage. This vulnerability affects Focus for iOS < 122.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.1%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2024-0606
-
cpe:2.3:a:mozilla:firefox_focus:100.0
-
cpe:2.3:a:mozilla:firefox_focus:102.0
-
cpe:2.3:a:mozilla:firefox_focus:103.0
-
cpe:2.3:a:mozilla:firefox_focus:104.0
-
cpe:2.3:a:mozilla:firefox_focus:105.0
-
cpe:2.3:a:mozilla:firefox_focus:106.0
-
cpe:2.3:a:mozilla:firefox_focus:107.0
-
cpe:2.3:a:mozilla:firefox_focus:107.1
-
cpe:2.3:a:mozilla:firefox_focus:108.0
-
cpe:2.3:a:mozilla:firefox_focus:108.1
-
cpe:2.3:a:mozilla:firefox_focus:109.0
-
cpe:2.3:a:mozilla:firefox_focus:110.0
-
cpe:2.3:a:mozilla:firefox_focus:111.0
-
cpe:2.3:a:mozilla:firefox_focus:111.1
-
cpe:2.3:a:mozilla:firefox_focus:112.0
-
cpe:2.3:a:mozilla:firefox_focus:113.0
-
cpe:2.3:a:mozilla:firefox_focus:114.0
-
cpe:2.3:a:mozilla:firefox_focus:115.0
-
cpe:2.3:a:mozilla:firefox_focus:116.0
-
cpe:2.3:a:mozilla:firefox_focus:117.0
-
cpe:2.3:a:mozilla:firefox_focus:118.0
-
cpe:2.3:a:mozilla:firefox_focus:119.0
-
cpe:2.3:a:mozilla:firefox_focus:120.0
-
cpe:2.3:a:mozilla:firefox_focus:121.0