Vulnerability Details CVE-2024-1563
An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme and a timeout race condition. This vulnerability affects Focus for iOS < 122.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.5%
CVSS Severity
CVSS v3 Score 8.1
References
Products affected by CVE-2024-1563
-
cpe:2.3:a:mozilla:firefox_focus:100.0
-
cpe:2.3:a:mozilla:firefox_focus:102.0
-
cpe:2.3:a:mozilla:firefox_focus:103.0
-
cpe:2.3:a:mozilla:firefox_focus:104.0
-
cpe:2.3:a:mozilla:firefox_focus:105.0
-
cpe:2.3:a:mozilla:firefox_focus:106.0
-
cpe:2.3:a:mozilla:firefox_focus:107.0
-
cpe:2.3:a:mozilla:firefox_focus:107.1
-
cpe:2.3:a:mozilla:firefox_focus:108.0
-
cpe:2.3:a:mozilla:firefox_focus:108.1
-
cpe:2.3:a:mozilla:firefox_focus:109.0
-
cpe:2.3:a:mozilla:firefox_focus:110.0
-
cpe:2.3:a:mozilla:firefox_focus:111.0
-
cpe:2.3:a:mozilla:firefox_focus:111.1
-
cpe:2.3:a:mozilla:firefox_focus:112.0
-
cpe:2.3:a:mozilla:firefox_focus:113.0
-
cpe:2.3:a:mozilla:firefox_focus:114.0
-
cpe:2.3:a:mozilla:firefox_focus:115.0
-
cpe:2.3:a:mozilla:firefox_focus:116.0
-
cpe:2.3:a:mozilla:firefox_focus:117.0
-
cpe:2.3:a:mozilla:firefox_focus:118.0
-
cpe:2.3:a:mozilla:firefox_focus:119.0
-
cpe:2.3:a:mozilla:firefox_focus:120.0
-
cpe:2.3:a:mozilla:firefox_focus:121.0