Vulnerability Details CVE-2024-26284
Utilizing a 302 redirect, an attacker could have conducted a Universal Cross-Site Scripting (UXSS) on a victim website, if the victim had a link to the attacker's website. This vulnerability affects Focus for iOS < 123.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.8%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2024-26284
-
cpe:2.3:a:mozilla:firefox_focus:100.0
-
cpe:2.3:a:mozilla:firefox_focus:102.0
-
cpe:2.3:a:mozilla:firefox_focus:103.0
-
cpe:2.3:a:mozilla:firefox_focus:104.0
-
cpe:2.3:a:mozilla:firefox_focus:105.0
-
cpe:2.3:a:mozilla:firefox_focus:106.0
-
cpe:2.3:a:mozilla:firefox_focus:107.0
-
cpe:2.3:a:mozilla:firefox_focus:107.1
-
cpe:2.3:a:mozilla:firefox_focus:108.0
-
cpe:2.3:a:mozilla:firefox_focus:108.1
-
cpe:2.3:a:mozilla:firefox_focus:109.0
-
cpe:2.3:a:mozilla:firefox_focus:110.0
-
cpe:2.3:a:mozilla:firefox_focus:111.0
-
cpe:2.3:a:mozilla:firefox_focus:111.1
-
cpe:2.3:a:mozilla:firefox_focus:112.0
-
cpe:2.3:a:mozilla:firefox_focus:113.0
-
cpe:2.3:a:mozilla:firefox_focus:114.0
-
cpe:2.3:a:mozilla:firefox_focus:115.0
-
cpe:2.3:a:mozilla:firefox_focus:116.0
-
cpe:2.3:a:mozilla:firefox_focus:117.0
-
cpe:2.3:a:mozilla:firefox_focus:118.0
-
cpe:2.3:a:mozilla:firefox_focus:119.0
-
cpe:2.3:a:mozilla:firefox_focus:120.0
-
cpe:2.3:a:mozilla:firefox_focus:121.0
-
cpe:2.3:a:mozilla:firefox_focus:122.0
-
cpe:2.3:a:mozilla:firefox_focus:122.1