CVE-2024-8897mediumCWE-601

CVE-2024-8897: falha de média gravidade em Mozilla Firefox for Android

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Firefox

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.1epss 7.6%
Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 130.0.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Mozilla · Firefox for Android
CVEs relacionadas — Mozilla Firefox for Android

No mesmo produto, das mais perigosas para as menos.

CVE-2022-26485HIGHCVE-2022-26485EPSS 14.3%KEVCVE-2022-26486CRITICALCVE-2022-26486EPSS 2.4%KEVCVE-2022-1802HIGHCVE-2022-1802EPSS 28.5%CVE-2022-1529HIGHCVE-2022-1529EPSS 17.6%CVE-2020-6829—CVE-2020-6829EPSS 1.5%CVE-2020-15664—CVE-2020-15664EPSS 1.4%