CVE-2024-26281: XSS
Published Feb 19, 2024
·Updated
Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the current top origin sites in the URL bar.
Affected Software
3 affected components
All of the following
Mozilla Firefox=123
Apple iOS
Mozilla Firefox Iphone Os<123.0
Event History
Feb 19, 2024
CVE Published
via Mozilla·12:00 AM
Feb 22, 2024
CVE Published
via MITRE·02:56 PM
Data Sourced
via MITRE·02:56 PM
DescriptionWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2024-26281?
CVE-2024-26281 is considered a high severity vulnerability due to the potential for unauthorized script execution.
2
How do I fix CVE-2024-26281?
To mitigate CVE-2024-26281, users should update their Mozilla Firefox to the latest version available.
3
Which software is affected by CVE-2024-26281?
CVE-2024-26281 affects Mozilla Firefox version 123 and Apple iOS, iPadOS, and watchOS.
4
What type of attack is associated with CVE-2024-26281?
CVE-2024-26281 is associated with a cross-site scripting attack via JavaScript URIs scanned by QR code scanners.
5
Can CVE-2024-26281 affect my web applications?
Yes, CVE-2024-26281 can impact web applications by allowing attackers to execute unauthorized scripts on sites visited by users.