When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI.
*Note: This issue only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.7.
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon
- https://github.com/seungminaaa/seungminaaa.github.io