CVE-2023-49060

CRITICAL 9.8CVE-2023-49060 · Published 21/11/2023 · updated 19/08/2026

In short

CVE-2023-49060 is a CRITICAL (CVSS 9.8) vulnerability affecting firefox mobile (mozilla).
Chance of exploitation in the next 30 days (EPSS): 0.64%, higher than 50.7% of all vulnerabilities.
Fix: update to 120.0 or later.

Package	Affected versions	Patched versions
firefox mobile mozilla	`< 120.0`	`120.0`

Description

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120.

References

bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
mozilla.org/security/advisories/mfsa2023-51 · Release Notes

More vulnerabilities in firefox mobile

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free