漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Spoofing risk in Android custom tabs
Vulnerability Description
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability was fixed in Firefox 144.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox和Mozilla Firefox Focus 安全漏洞
Vulnerability Description
Mozilla Firefox和Mozilla Firefox Focus都是美国Mozilla基金会的产品。Mozilla Firefox是一款开源Web浏览器。Mozilla Firefox Focus是一个供iOS设备专用的浏览器。 Mozilla Firefox和Mozilla Firefox Focus 144之前版本存在安全漏洞,该漏洞源于Android自定义标签功能仅显示加载的站点而非完整主机名,可能导致用户误判子域名内容来源。
CVSS Information
N/A
Vulnerability Type
N/A