CVE-2024-10474

Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL…

Critical · published October 29, 2024

CVSS v3.1
9.1
EPSS
0%
Percentile
24.1
In the wild
Unconfirmed
What it is

Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL safety checks This vulnerability affects Focus for iOS < 132.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00323 · 24.1th percentile
Published
2024-10-29T12:19Z
EPSS history
Timeline
  • 29 OCT 12:19Z
    Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL…
    cvelistv5