Security advisories for Focus iOS v130

mozilla · Sep 3, 2024 · e9c4f8f · e9c4f8f
1 parent 2d8da0a
commit e9c4f8f
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/announce/2024/mfsa2024-42.yml b/announce/2024/mfsa2024-42.yml
@@ -0,0 +1,14 @@
+## mfsa2024-42.yml
+announced: Sep 3, 2024
+impact: high
+fixed_in:
+- Focus for iOS 130
+title: Security Vulnerabilities fixed in Focus for iOS 130
+advisories:
+  CVE-2024-8399:
+    title: iOS Firefox Focus javascript URI address bar spoofing
+    impact: high
+    reporter: James Lee
+    description: Websites could utilize Javascript links to spoof URL addresses in the Focus navigation bar
+    bugs:
+      - url: 1863838