CVE-2024-5022

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-5022
The file scheme of URLs would be hidden, resulting in potential spoofing of a website's address in the location bar This vulnerability affects Focus for iOS < 126.

4.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1874560 Issue Tracking
https://www.mozilla.org/security/advisories/mfsa2024-24/ Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1874560 Issue Tracking
https://www.mozilla.org/security/advisories/mfsa2024-24/ Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:iphone_os:*:*
History

04 Apr 2025, 14:25

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CPE cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:iphone_os:*:*
First Time Mozilla firefox Focus
Mozilla
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1874560 - () https://bugzilla.mozilla.org/show_bug.cgi?id=1874560 - Issue Tracking
References () https://www.mozilla.org/security/advisories/mfsa2024-24/ - () https://www.mozilla.org/security/advisories/mfsa2024-24/ - Vendor Advisory

21 Nov 2024, 09:46

Type Values Removed Values Added
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1874560 - () https://bugzilla.mozilla.org/show_bug.cgi?id=1874560 -
References () https://www.mozilla.org/security/advisories/mfsa2024-24/ - () https://www.mozilla.org/security/advisories/mfsa2024-24/ -

28 Oct 2024, 21:35

Type Values Removed Values Added
Summary
  • (es) El esquema de archivos de las URL estaría oculto, lo que daría como resultado una posible falsificación de la dirección de un sitio web en la barra de direcciones. Esta vulnerabilidad afecta a Focus para iOS &lt; 126.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.4

17 May 2024, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-17 19:15

Updated : 2025-04-04 14:25

NVD link : CVE-2024-5022

Mitre link : CVE-2024-5022

CVE.ORG link : CVE-2024-5022

JSON object : View

Products Affected

mozilla

  • firefox_focus
CWE
NVD-CWE-noinfo