Open Redirect Vulnerability in Firefox for Android

CVE-2024-8897

Summary

An open redirect vulnerability in Firefox for Android allows attackers to exploit the redirect functionality of trusted websites. This leads to the potential spoofing of the browser's address bar, making it difficult for users to discern whether they are on a legitimate site or a malicious one. Attackers could redirect users to fraudulent websites that mimic trusted addresses, thereby increasing the risk of phishing attacks and unauthorized data acquisition. This issue specifically affects versions of Firefox for Android prior to 130.0.1, highlighting the importance of timely updates and awareness of security practices to mitigate such risks.

References