Описание
Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox for Android < 130.0.1.
Ссылки
- Issue TrackingPermissions Required
- Vendor Advisory
Уязвимые конфигурации
Одновременно
EPSS
6.1 Medium
CVSS3
Дефекты
Связанные уязвимости
Under certain conditions, an attacker with the ability to redirect use ...
Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 130.0.1.
Уязвимость браузера Mozilla Firefox операционных систем Android, связанная с использованием открытой переадресации, позволяющая нарушителю перенаправить пользователя на произвольный URL-адрес
ALT-PU-2024-13895: package `firefox` update to version 131.0.2-alt1
ALT-PU-2025-11100: package `firefox-esr` update to version 140.2.0-alt2
EPSS
6.1 Medium
CVSS3