6.1
Medium
CVE-2024-8897 Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a…
Description
Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 130.0.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox for Android 130.0 | earliest → < 130.0.1 | 130.0.1 |
References
- bugzilla.mozilla.org bugzilla.mozilla.org
- www.mozilla.org www.mozilla.org
Timeline
- Published
- Last modified
Other CVEs of Firefox for Android
The 33 CVEs of Firefox for Android →
CVE-2023-29546
When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden,…
6.5
Medium
CVE-2023-29534
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android
9.1
Critical
CVE-2023-25747
A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below…
7.5
High
CVE-2023-29550
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9
8.8
High