Security Advisory

CVE-2024-1563

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-02-22 14:56:42
Last updated 2025-03-27 15:05:38
Assigner mozilla
State PUBLISHED

Description

An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme and a timeout race condition. This vulnerability affects Focus for iOS < 122.