Second-Order Alert: Incorrectly Allowing Internal Links to Utilize App Scheme for Deeplinking Could Bypass URL Safety Checks

CVE-2024-10474

Summary

A security issue has been identified in Focus for iOS where the application incorrectly permits internal links to use the app scheme designated for deep linking. This misconfiguration can lead to the circumvention of established URL safety checks, potentially leaving users exposed to security risks if malicious content is linked. The affected versions of Focus are those below 132, indicating a need for immediate updates to ensure secure handling of internal links.

References