CVE-2023-49060: Critical severity firefox vulnerability

Q: What is CVE-2023-49060?

CVE-2023-49060 is a vulnerability in Firefox for iOS that could allow an attacker to access internal pages or data by extracting a security key from ReaderMode through the referrerpolicy attribute.

Q: How does CVE-2023-49060 affect Firefox for iOS?

CVE-2023-49060 affects Firefox for iOS versions prior to 120.

Q: What is the severity of CVE-2023-49060?

CVE-2023-49060 has a severity rating of high.

Q: How can I fix CVE-2023-49060?

To fix CVE-2023-49060, users should update their Firefox for iOS to version 120 or higher.

Q: Where can I find more information about CVE-2023-49060?

More information about CVE-2023-49060 can be found in the Mozilla Security Advisory MFSA2023-51.

Published Nov 21, 2023

Updated

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the referrerpolicy attribute. This vulnerability affects Firefox for iOS < 120.

Other sources

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the referrerpolicy attribute.

— Mozilla

Affected Software

3 affected components

Mozilla Firefox Iphone Os<120.0

All of the following

Mozilla Firefox=120

Apple iOS

Event History

Nov 21, 2023

CVE Published

via Mozilla·12:00 AM

CVE Published

via MITRE·02:28 PM

Data Sourced

via MITRE·02:28 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

MFSA2023-51

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2023-49060?

CVE-2023-49060 is a vulnerability in Firefox for iOS that could allow an attacker to access internal pages or data by extracting a security key from ReaderMode through the referrerpolicy attribute.

How does CVE-2023-49060 affect Firefox for iOS?

CVE-2023-49060 affects Firefox for iOS versions prior to 120.

What is the severity of CVE-2023-49060?