{ "id": "CVE-2024-26284", "sourceIdentifier": "security@mozilla.org", "published": "2024-02-22T15:15:08.780", "lastModified": "2024-02-22T19:07:27.197", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Utilizing a 302 redirect, an attacker could have conducted a Universal Cross-Site Scripting (UXSS) on a victim website, if the victim had a link to the attacker's website. This vulnerability affects Focus for iOS < 123." }, { "lang": "es", "value": "8Utilizando una redirecci\u00f3n 302, un atacante podr\u00eda haber realizado un Universal Cross-Site Scripting (UXSS) en el sitio web de una v\u00edctima, si la v\u00edctima tuviera un enlace al sitio web del atacante. Esta vulnerabilidad afecta a Focus para iOS < 123." } ], "metrics": {}, "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1860075", "source": "security@mozilla.org" }, { "url": "https://www.mozilla.org/security/advisories/mfsa2024-10/", "source": "security@mozilla.org" } ] }