PT-2024-30300 · Mozilla · Firefox

James Lee · Published 2024-08-06 · Updated 2024-08-29 · CVE-2024-43111

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 129

Description A potential issue exists where long pressing on a download link could allow Javascript commands to be executed within the browser.

Recommendations For Firefox for iOS versions prior to 129, update to version 129 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-43111

Affected Products

Firefox

References · 7

• https://mozilla.org/security/advisories/mfsa2024-36 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-43111 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-43111 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-43111 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-43111 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43111 · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1874907 · Note