Mozilla Firefox for iOS Spoofing Vulnerability via Scripted Navigation
Vulnerability
A vulnerability in Firefox for iOS versions prior to 147.4 allows malicious scripts to create a desynchronization between the address bar and web content. This issue can lead to attacker-controlled pages being displayed under misleading domains. The vulnerability arises from the way Firefox for iOS handles scripted navigation, potentially allowing for phishing or other deceptive practices.
Impact
Exploitation of this vulnerability could result in spoofing attacks, where users are led to believe they are on a trusted site when they are not.
Remediation
Users can upgrade to Firefox for iOS version 147.4 or later to address this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.