Unscored CVE-2023-49060 EUVD-2023-53083GHSA-2pmg-xgx9-g8w8

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. …

Published Nov 21, 2023 · Updated Aug 2, 2024 · Assigned by mozilla

Vendor: Mozilla Product: Firefox for iOS Platform: iOS Category: Browsers

Description

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120.

Affected products

Vendor	Product	Affected	Fixed
Mozilla	Firefox for iOS	unspecified – < 120	120

Advisories 1

WID-SEC-2023-2995 Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 15, 2024

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1861405
https://www.mozilla.org/security/advisories/mfsa2023-51/