Vulnerability in Mozilla Focus For Ios

CVE-2024-0605

Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin sites in urlbar. This bypasses security measures, potentially leading to arbitrary code execution or unauthorized actions…

EPSS: 0.000 (11.0th percentile) — read the EPSS interpretation.

Affected products

References