cbcvebase.
CVE-2024-43111
published 2024-08-06

CVE-2024-43111: Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129.

medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129.

Affected

4 ranges
VendorProductVersion rangeFixed in
debianfirefox
mozillafirefox< 129129
mozillafirefox
mozillafirefox_for_ios>= unspecified < 129129

CVSS provenance

nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
osv6.1MEDIUM