Mozilla Focus for iOS Spoofing Vulnerability via Iframe Redirect

A vulnerability in Mozilla Focus for iOS versions prior to 148.2 allows malicious scripts to display attacker-controlled content under fake domains. This is achieved by stalling a self-navigation to an invalid port, which triggers an iframe redirect. As a result, the user interface presents a trusted domain without any user interaction.

Impact

Exploitation of this vulnerability could lead to phishing attacks or the distribution of malware, as it allows for the presentation of malicious content under the guise of a trusted source.

Remediation

Users can update to Mozilla Focus for iOS version 148.2 to address this vulnerability.