Paper/Archive/CVE-2024-10004

CVE-2024-10004

Mozilla Firefox for iOS — Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result i…

EPSS 0.4%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (ADP)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 32.1.321 × 206.4 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This vulnerability affects Firefox for iOS < 131.2.

Affected

ProductAffectedFixed inSource

Firefox for iOSunspecified – < 131.2131.2CNA

firefox< 131.2131.2CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refbugzilla.mozilla.org/show_bug.cgi?id=1904885 refmozilla.org/security/advisories/mfsa2024-54