CVE-2024-43111

Опубликовано: 06 авг. 2024

Источник: nvd

CVSS3: 6.1

CVSS3: 9.8

EPSS Низкий

Описание

Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129.

Ссылки

https://bugzilla.mozilla.org/show_bug.cgi?id=1874907
Issue Tracking
Permissions Required
https://www.mozilla.org/security/advisories/mfsa2024-36/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:iphone_os:*:*

Версия до 129 (исключая)

EPSS

Процентиль: 70%

0.00646

Низкий

6.1 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVE-2024-43111

CVSS3: 6.1

ubuntu

больше 1 года назад

Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129.

CVE-2024-43111

CVSS3: 6.1

debian

больше 1 года назад

Long pressing on a download link could potentially allow Javascript co ...

GHSA-cr8r-7g9p-hcx6

CVSS3: 9.8

github

больше 1 года назад

Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129.

EPSS

Процентиль: 70%

0.00646

Низкий

6.1 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-79