CVE-2024-10004

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-10004
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This vulnerability affects Firefox for iOS < 131.2.

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1904885 Issue Tracking Permissions Required
https://www.mozilla.org/security/advisories/mfsa2024-54/ Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
History

04 Apr 2025, 14:36

Type Values Removed Values Added
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1904885 - () https://bugzilla.mozilla.org/show_bug.cgi?id=1904885 - Issue Tracking, Permissions Required
References () https://www.mozilla.org/security/advisories/mfsa2024-54/ - () https://www.mozilla.org/security/advisories/mfsa2024-54/ - Vendor Advisory
First Time Mozilla
Mozilla firefox
CPE cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
Information

Published : 2024-10-15 22:15

Updated : 2025-04-04 14:36

NVD link : CVE-2024-10004

Mitre link : CVE-2024-10004

CVE.ORG link : CVE-2024-10004

JSON object : View

Products Affected

mozilla

  • firefox
CWE
CWE-1021

Improper Restriction of Rendered UI Layers or Frames