Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-38313 EUVD-2024-37261GHSA-f78g-xm2r-gm6j

In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual websit…

Published Jun 13, 2024 · Updated Mar 14, 2025 · Assigned by mozilla

Description

In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website address This vulnerability affects Firefox for iOS < 127.

Affected products

VendorProductAffectedFixed
Mozilla Firefox for iOS unspecified – < 127 127

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling firefox 127.0.2-r0 —

Advisories 1

References