Malicious scripts utilizing repetitive JavaScript alerts could prevent client user interaction in some scenarios and allow for denial of service attacks. This vulnerability affects Firefox for iOS versions less than 142.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-55028 |
Exploitation
To exploit this vulnerability, an attacker can craft a malicious script that repeatedly triggers JavaScript alerts in the Firefox for iOS application. This can lead to a denial of service by preventing users from interacting with the application, effectively locking them out.
Affected Products
- Firefox for iOS < 142: This version is susceptible to denial of service attacks due to the vulnerability in handling repetitive JavaScript alerts.
Mitigation
To mitigate this vulnerability, users should update their Firefox for iOS application to version 142 or later, where the issue has been addressed. Additionally, users should be cautious about the sources of scripts they execute within the browser.