CVE-2024-0606
An attacker could execute unauthorized script on a legitimate site through UXSS using window.open() by opening a javascript URI leading to unauthorize...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An attacker could execute unauthorized script on a legitimate site through UXSS using window.open() by opening a javascript URI leading to unauthorized actions within the user's loaded webpage. This vulnerability affects Focus for iOS < 122.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory mozilla.org
- report bugzilla.mozilla.org