Critical · 9.8 CVE-2024-43111 EUVD-2024-40039GHSA-cr8r-7g9p-hcx6

Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects F…

Published Aug 6, 2024 · Updated Aug 7, 2024 · Assigned by mozilla

Vendor: Mozilla Product: Firefox for iOS Package: firefox Platform: iOS Category: Browsers Ecosystem: Wolfi

Description

Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129.

Affected products

Vendor	Product	Affected	Fixed
Mozilla	Firefox for iOS	unspecified – < 129	129

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Wolfi

Release	Package	Fixed in	Advisory
Wolfi rolling	firefox	129.0.2-r0	—

Advisories 1

WID-SEC-2024-1784 Mozilla Firefox für iOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 6, 2024