Mozilla Firefox for iOS Full Address Bar Spoof Vulnerability via Server-Side Redirect

A vulnerability in Firefox for iOS versions prior to 136 allows malicious websites to spoof the URL displayed in the address bar. This occurs through a server-side redirect to an internal error page, which can manipulate the perceived website URL.

Impact

Exploitation of this vulnerability leads to a high-severity spoofing issue, where the address bar does not accurately reflect the current website, potentially misleading users about their online location.

Remediation

Users can upgrade to Firefox for iOS version 136 to address this vulnerability.