High · 7.1 CVE-2024-26282 EUVD-2024-23553GHSA-g386-c6xv-h62r

Using an AMP url with a canonical element, an attacker could have executed JavaScript from an opened bookmarked page. This vulnerability af…

Published Feb 22, 2024 · Updated Mar 13, 2025 · Assigned by mozilla

Vendor: Mozilla Product: Firefox for iOS Platform: iOS Category: Browsers

Description

Using an AMP url with a canonical element, an attacker could have executed JavaScript from an opened bookmarked page. This vulnerability affects Firefox for iOS < 123.

Affected products

Vendor	Product	Affected	Fixed
Mozilla	Firefox for iOS	unspecified – < 123	123

Advisories 1

WID-SEC-2024-0471 Mozilla Firefox: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Feb 22, 2024

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1863788
https://www.mozilla.org/security/advisories/mfsa2024-08/