CVE-2023-28159

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 111

Description The issue is related to the fullscreen notification mode in Firefox for Android, where the lack of warnings about potentially dangerous actions when loading downloadable file popups can lead to user confusion or spoofing attacks. This can be exploited by a remote attacker to conduct spoofing attacks.

Recommendations For Firefox for Android versions prior to 111, update to version 111 or later to resolve the issue. As a temporary workaround, consider avoiding the use of downloadable file popups in fullscreen notification mode until the update is applied.