Unscored CVE-2023-49061 EUVD-2023-53084GHSA-c6mg-xwvh-76jx

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firef…

Published Nov 21, 2023 · Updated Aug 2, 2024 · Assigned by mozilla

Vendor: Mozilla Product: Firefox for iOS Platform: iOS Category: Browsers

Description

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120.

Affected products

Vendor	Product	Affected	Fixed
Mozilla	Firefox for iOS	unspecified – < 120	120

Advisories 1

WID-SEC-2023-2995 Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 15, 2024

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1861420
https://www.mozilla.org/security/advisories/mfsa2023-51/