Vulnerability in Mozilla Focus For Ios
CVE-2024-0605
Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin sites in urlbar. This bypasses security measures, potentially leading to arbitrary code execution or unauthorized actions…
EPSS: 0.000 (11.0th percentile) — read the EPSS interpretation.
Affected products
- Mozilla Focus For Ios — versions unspecified