VULNERABILITY INTELLIGENCE

CVE-2024-10474

CVSS score6.5 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2024-10-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL safety checks This vulnerability affects Focus for iOS < 132.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-287

Primary references