Medium · 6.1 CVE-2024-43112 EUVD-2024-40040GHSA-xmm2-x5jc-rvmh

Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 12…

Published Aug 6, 2024 · Updated Mar 17, 2025 · Assigned by mozilla

Vendor: Mozilla Product: Firefox for iOS Package: firefox Platform: iOS Category: Browsers Ecosystem: Wolfi

Description

Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129.

Affected products

Vendor	Product	Affected	Fixed
Mozilla	Firefox for iOS	unspecified – < 129	129

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Wolfi

Release	Package	Fixed in	Advisory
Wolfi rolling	firefox	129.0.2-r0	—

Advisories 1

WID-SEC-2024-1784 Mozilla Firefox für iOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 6, 2024