CVE-2023-49060

CriticalCVSS 9.8

Published: 21/11/2023(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.64%

48th percentile - higher than 48% of all known CVEs

Summary

In Firefox for iOS, an attacker could access internal pages or data by exfiltrating a security key from ReaderMode via the referrerpolicy attribute. This affects Firefox for iOS versions prior to 120.

Risk Assessment

The risk includes potential leakage of sensitive data or unauthorized access to internal browser resources.

Recommendation

Update Firefox for iOS to version 120 or later.

Original NVD description (English source)

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120.