CVE-2024-43112
published 2024-08-06CVE-2024-43112: Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129.
PriorityP422medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.25%
16.6th percentile
Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox_for_ios | >= unspecified < 129 | 129 |
| mozilla | firefox_mobile | < 129 | 129 |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
osv6.1MEDIUM
vendor_debian6.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2024-43112: firefox - Long pressing on a download link could potentially provide a means for cross-sit...
vendor_debian·2024·CVSS 6.1
CVE-2024-43112 [MEDIUM] CVE-2024-43112: firefox - Long pressing on a download link could potentially provide a means for cross-sit...
Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129.
Scope: local
sid: resolved
Mozilla
Mozilla Foundation Security Advisory 2024-36: CVE-2024-43112
vendor_mozilla·CVSS 6.1
CVE-2024-43112 [MEDIUM] Mozilla Foundation Security Advisory 2024-36: CVE-2024-43112
Mozilla Foundation Security Advisory 2024-36
CVE: CVE-2024-43112
Product: Firefox for iOS
Impact: low
Fixed in: Firefox for iOS 129
VulDB
Mozilla Firefox up to 128 on iOS Download Link cross site scripting
vuldb·2026-08-22·CVSS 6.1
CVE-2024-43112 [MEDIUM] Mozilla Firefox up to 128 on iOS Download Link cross site scripting
A vulnerability, which was classified as problematic, has been found in Mozilla Firefox up to 128 on iOS. The affected element is an unknown function of the component Download Link Handler. The manipulation leads to cross site scripting.
This vulnerability is referenced as CVE-2024-43112. Remote exploitation of the attack is possible. No exploit is available.
It is advisable to upgrade the affected component.
OSV
CVE-2024-43112: Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129
osv·2024-08-06·CVSS 6.1
CVE-2024-43112 [MEDIUM] CVE-2024-43112: Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129
Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129.
GHSA
GHSA-xmm2-x5jc-rvmh: Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129
ghsa_unreviewed·2024-08-06
CVE-2024-43112 [MEDIUM] CWE-79 GHSA-xmm2-x5jc-rvmh: Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129
Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129.
No detection rules found.
No public exploits indexed.
2024-08-06
Published