PT-2024-4554

CVE-2024-5022

Published

2024-05-16

Updated

2024-10-28

Description by

CVSS 2.0

6.4

Medium

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Focus for iOS versions prior to 126

Description: The issue is related to the file scheme of URLs being hidden, potentially allowing spoofing of a website's address in the location bar. This could enable a remote attacker to conduct spoofing attacks by exploiting errors in the representation of information in the user interface.

Recommendations: For Focus for iOS versions prior to 126, update to version 126 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

James Lee

Vendors

Affected products

Weakness enumeration

CWE-451: User Interface (UI) Misrepresentation of Critical Information

Related identifiers

CVE-2024-5022