{"id":"CVE-2024-38312","state":"PUBLISHED","title":"When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vu","description":"When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS < 127.","publishedAt":"2024-06-13T20:01:13.543Z","updatedAt":"2025-03-19T14:17:43.824Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","source":"CISA-ADP"},"assigner":"mozilla","products":["Mozilla Firefox for iOS"],"affected":[{"vendor":"Mozilla","product":"Firefox for iOS","versions":[{"version":"unspecified","status":"affected","lessThan":"127","versionType":"custom"}]}],"references":["https://bugzilla.mozilla.org/show_bug.cgi?id=1878578","https://www.mozilla.org/security/advisories/mfsa2024-27/"],"weaknesses":["CWE-922"],"ingestedAt":"2026-10-29T20:07:39.287Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/38xxx/CVE-2024-38312.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-38312","state":"PUBLISHED","datePublished":"2024-06-13T20:01:13.543Z","dateUpdated":"2025-03-19T14:17:43.824Z","assignerShortName":"mozilla","assignerOrgId":"f16b083a-5664-49f3-a51e-8d479e5ed7fe","dateReserved":"2024-06-13T18:40:29.768Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS < 127."}],"affected":[{"vendor":"Mozilla","product":"Firefox for iOS","versions":[{"version":"unspecified","status":"affected","lessThan":"127","versionType":"custom"}]}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1878578"},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-27/"}],"problemTypes":[{"descriptions":[{"description":"Private tabs could result in residual data related to browsing history in app bundle","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mozilla","orgId":"f16b083a-5664-49f3-a51e-8d479e5ed7fe","dateUpdated":"2024-06-13T20:01:13.543Z"},"credits":[{"lang":"en","value":"Adam Berry"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1878578","tags":["x_transferred"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-27/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T04:04:25.248Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-08-05T19:02:31.503642Z","id":"CVE-2024-38312","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-922","type":"CWE","lang":"en","description":"CWE-922 Insecure Storage of Sensitive Information"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-19T14:17:43.824Z"}}]}}}