CVE-2024-0953CWE-601

CVE-2024-0953

Medium · published February 5, 2024

CVSS v3.1
6.1
EPSS
0%
Percentile
22.3
In the wild
Unconfirmed
What it is

When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code. This may surprise the user and potentially direct them to unwanted content. This vulnerability affects Firefox for iOS < 129.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00307 · 22.3th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2024-02-05T22:15Z
Affected products (1)
ProductVersionsFixed in
mozilla/firefox_mobileall versions—
References (3)
https://bugzilla.mozilla.org/show_bug.cgi?id=1837916 · [email protected]https://www.mozilla.org/security/advisories/mfsa2024-36/ · [email protected]https://bugzilla.mozilla.org/show_bug.cgi?id=1837916 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 05 FEB 16:48Z
    When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code
    cvelistv5