1875889 - Open redirect in Firefox WebXR Viewer iOS QR Code Scanner

Status: RESOLVED DUPLICATE of bug 1875890

(Firefox for iOS :: General, defect)

Description

[Lohith Gowda M]

The QR Code Scanner feature in the Firefox WebXR Viewer iOS app is vulnerable to an open redirect attack. This vulnerability allows an attacker to redirect users to malicious websites or URLs, potentially leading to phishing attacks or the disclosure of sensitive information.

Steps To Reproduce:

1. Launch the Firefox WebXR Viewer iOS app.
2. Navigate the QR code scanner in the Home page search bar (Top Right Side)
3. Create a QR Code with a specially crafted URL using https://www.the-qrcode-generator.com/
4. Scan a QR code that contains a specially crafted URL with an external domain.
5. Observe that the app redirects to the external domain without proper validation or user consent

Fix:

• The QR Code Scanner should validate the URL before redirecting users.
• Implement proper input validation and URL verification in the QR Code Scanner feature to prevent open redirect vulnerabilities.
• Apply the same fix for Android as well.

Impact

• This vulnerability could be exploited by attackers to trick users into visiting malicious websites, potentially leading to the theft of personal information, financial fraud, or other security risks.