cve/2024/CVE-2024-8897.md

CVE-2024-8897

Description

Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site.This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox for Android < 130.0.1.

POC

Reference

• https://bugzilla.mozilla.org/show_bug.cgi?id=1862537

Github

No PoCs found on GitHub currently.