PT-2024-21330
CVE-2024-26282
·
Published
2024-02-22
·
Updated
2024-11-06
Description by
CVSS 3.1
7.1
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Firefox for iOS versions prior to 123
Description
An issue allows an attacker to execute JavaScript from an opened bookmarked page when using an AMP url with a canonical element.
Recommendations
For versions prior to 123, update to a version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾