Q: What is CVE-2023-29540 — CVE-2023-29540?

Using a redirect embedded into sourceMappingUrls could allow for navigation to external protocol links in sandboxed iframes without allow-top-navigation-to-custom-protocols . This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

Q: What is the authoritative source for CVE-2023-29540?

CVE-2023-29540 (CVE-2023-29540) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

Question 1

What is CVE-2023-29540 — CVE-2023-29540?

Accepted Answer

Using a redirect embedded into sourceMappingUrls could allow for navigation to external protocol links in sandboxed iframes without allow-top-navigation-to-custom-protocols. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

Question 2

What is the authoritative source for CVE-2023-29540?

Accepted Answer

CVE-2023-29540 (CVE-2023-29540) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	6.1 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS	0.32% probability of exploitation · percentile 22.2% · 2026-10-05T12:00:23Z
Last modified	2026-08-19

CVE-2023-29540CVE-2023-29540

Description

Scoring