URL Redirection to Untrusted Site ('Open Redirect') Affecting Firefox package, versions [,130.0.1)
Threat Intelligence
EPSS
0.05% (19th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-UNMANAGED-FIREFOX-7986124
- published 17 Sep 2024
- disclosed 17 Sep 2024
- credit Thomas Orlita
Introduced: 17 Sep 2024
CVE-2024-8897 Open this link in a new tabHow to fix?
Upgrade Firefox to version 130.0.1 or higher.
Overview
Affected versions of this package are vulnerable to URL Redirection to Untrusted Site ('Open Redirect') by spoofing the address bar contents.
Note: This vulnerability only affects Firefox for Android.