CVE-2022-31746: Mozilla Firefox Mobile

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. This vulnerability affects Firefox for iOS < 102.

Affected products

• Mozilla Firefox Mobile: before 102.0 (fixed in 102.0)

Published 2022-12-22. Last modified 2026-08-19.