PT-2024-21332
CVE-2024-26284
·
تاريخ النشر
2024-02-22
·
تاريخ التحديث
2024-12-31
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Focus for iOS versions prior to 123
Description
This issue allows an attacker to conduct a Universal Cross-Site Scripting (UXSS) attack on a victim website using a 302 redirect, provided the victim has a link to the attacker's website.
Recommendations
For Focus for iOS versions prior to 123, update to version 123 or later to resolve the issue. As a temporary workaround, consider restricting links to untrusted websites to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾