medium6.1
CVE-2024-0606
An attacker could execute unauthorized script on a legitimate site through UXSS using window.open() by opening a javascript URI leading to unauthorized actions…
Impact
An attacker could execute unauthorized script on a legitimate site through UXSS using window.open() by opening a javascript URI leading to unauthorized actions within the user's loaded webpage. This vulnerability affects Focus for iOS < 122.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox Focus | before 122.0 |