CVE-2024-8897 Information

Description

Under certain conditions an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox for Android < 130.0.1.

Reference

https://bugzilla.mozilla.org/show_bug.cgi?id=1862537 https://www.mozilla.org/security/advisories/mfsa2024-45/