CVE-2024-10474

CVSS 9.1 CRITICALEPSS 0.3%CWE-287

Vexday Risk Score

28Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 9.1EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

29 oct 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL safety checks This vulnerability affects Focus for iOS < 132.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Productos afectados

Mozilla · Focus for iOS

Referencias

https://bugzilla.mozilla.org/show_bug.cgi?id=1863832 https://www.mozilla.org/security/advisories/mfsa2024-60/