Closed Bug 1843468 Opened 2 years ago Closed 2 years ago

Firefox iOS SSL Lock Spoof via https://facebook.com:83

Categories

(Firefox for iOS :: General, defect)

Product:
Firefox for iOS
Component:
General
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1843467

People

(Reporter: proof131072, Unassigned)

References

(
URL
)

Details

(Keywords: csectype-spoof, reporter-external, Whiteboard: [reporter-external] [client-bounty-form] [verif?])

We are able to spoof SSL Lock on Firefox iOS using non-existent port from non-secure http sites. Please note that when we load with https://facebook.com:83, the duration is significantly longer which is more reliable.

Test on: http://pwning.click/ffsslfacebook.php

Flags: sec-bounty?
Group: firefox-core-security → mobile-core-security
Component: Security → General
Product: Firefox → Firefox for iOS
See Also: → CVE-2024-53975

The source of the linked page is <script>location="https://www.facebook.com:83"</script>

Status: NEW → RESOLVED
Closed: 2 years ago
Duplicate of bug: CVE-2024-53975
Resolution: --- → DUPLICATE
Flags: sec-bounty? → sec-bounty-
Group: mobile-core-security
You need to log in before you can comment on or make changes to this bug.