by Kastro
Paper/Archive/CVE-2024-10474

CVE-2024-10474

Mozilla Focus for iOS — Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially cir…

EPSS 0.3%CVSS 9.1
critical.is priorityof 100
32
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 25.4.254 × 205.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL safety checks This vulnerability affects Focus for iOS < 132.

Affected

ProductAffectedFixed inSource
Focus for iOSunspecified – < 132132CNA
focus_for_ios< 132132CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refbugzilla.mozilla.org/show_bug.cgi?id=1863832refmozilla.org/security/advisories/mfsa2024-60