Skip to content

Commit

Permalink
Security advisories for Firefox Focus for iOS v132
Browse files Browse the repository at this point in the history
* Security advisories for Firefox Focus v132

* Moderate impact

* Attempt to fix error in YML
  • Loading branch information
mattreaganmozilla authored and rvandermeulen committed Oct 29, 2024
1 parent 8994162 commit 5a8bb03
Showing 1 changed file with 15 additions and 0 deletions.
15 changes: 15 additions & 0 deletions announce/2024/mfsa2024-60.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
## mfsa2024-60.yml
announced: October 28, 2024
impact: moderate
fixed_in:
- Focus for iOS 132
title: Security Vulnerabilities fixed in Focus for iOS 132
advisories:
CVE-2024-10474:
title: Don't allow web content to open firefox-focus URLs
impact: moderate
reporter: James Lee
description: |
Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL safety checks
bugs:
- url: 1863832

0 comments on commit 5a8bb03

Please sign in to comment.