CVE-2024-26283

{"id": "CVE-2024-26283", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2024-02-22T15:15:08.730", "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1850158", "tags": ["Issue Tracking"], "source": "[email protected]"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2024-08/", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1850158", "tags": ["Issue Tracking"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2024-08/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-83"}]}], "descriptions": [{"lang": "en", "value": "An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme. This vulnerability affects Firefox for iOS < 123."}, {"lang": "es", "value": "Un atacante podr\u00eda haber ejecutado scripts no autorizados en los principales sitios de origen utilizando un URI de JavaScript al abrir una URL externa con un esquema personalizado de Firefox. Esta vulnerabilidad afecta a Firefox para iOS &lt; 123."}], "lastModified": "2025-03-27T14:46:58.613", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:iphone_os:*:*", "vulnerable": true, "matchCriteriaId": "8893CD2B-7E6A-4E69-B6F9-CEC7A54D8F22", "versionEndExcluding": "123.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}