Under certain circumstances, a JavaScript alert (or prompt) could have been shown while another website was displayed underneath it. This could have been abused to trick the user. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 97.
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
Link | Tags |
---|---|
https://www.mozilla.org/security/advisories/mfsa2022-04/ | vendor advisory |
https://bugzilla.mozilla.org/show_bug.cgi?id=1743931 | issue tracking vendor advisory |