CVE-2024-10004
published 2024-10-15CVE-2024-10004: Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon…
critical9.1CVSS 3.1
AVNACLPRNUINSUCHIHAN
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This vulnerability affects Firefox for iOS < 131.2.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | < 131.2.0 | 131.2.0 |
| mozilla | firefox | — | — |
| mozilla | firefox_for_ios | >= unspecified < 131.2 | 131.2 |
CVSS provenance
nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
osv9.1CRITICAL
Debian
CVE-2024-10004: firefox - Opening an external link to an HTTP website when Firefox iOS was previously clos...
vendor_debian·2024·CVSS 9.1
CVE-2024-10004 [CRITICAL] CVE-2024-10004: firefox - Opening an external link to an HTTP website when Firefox iOS was previously clos...
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This vulnerability affects Firefox for iOS < 131.2.
Scope: local
sid: resolved
Mozilla
Mozilla Foundation Security Advisory 2024-54: CVE-2024-10004
vendor_mozilla·CVSS 9.1
CVE-2024-10004 [CRITICAL] Mozilla Foundation Security Advisory 2024-54: CVE-2024-10004
Mozilla Foundation Security Advisory 2024-54
CVE: CVE-2024-10004
Product: Firefox for iOS
Impact: moderate
Fixed in: Firefox for iOS 131.2
GHSA
GHSA-wh67-cc45-g7cf: Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock
ghsa_unreviewed·2024-10-16
CVE-2024-10004 [CRITICAL] CWE-1021 GHSA-wh67-cc45-g7cf: Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This vulnerability affects Firefox for iOS < 131.2.
OSV
CVE-2024-10004: Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock
osv·2024-10-15·CVSS 9.1
CVE-2024-10004 [CRITICAL] CVE-2024-10004: Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This vulnerability affects Firefox for iOS < 131.2.
No detection rules found.
No public exploits indexed.
2024-10-15
Published