← Back

CVE-2024-0953

nvd nist
Published: Feb 5, 2024Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code. This may surprise the user and potentially direct them to unwanted content. This vulnerability affects Firefox for iOS < 129.

Affected (1)

Products: Mozilla: Firefox
Mozilla
1 product
Firefox
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Firefox
All versions

Related CWEs

CWE-601
URL Redirection to Untrusted Site ('Open Redirect')
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (3)

Source: security@mozilla.org
ExploitIssue Tracking
Source: security@mozilla.org
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue Tracking

Timeline

No history available yet.