description: When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI. <br> *Note: This issue only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.7.
problem types: Custom Tabs in Firefox for Android could have the URI spoofed
affected:
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 68.7, status: affected, version: unspecified, versionType: custom
}