Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2p26-9483-vh42

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Mozilla Firefox allows for cookies to be set with a null domain (aka "domainless cookies"), which allows remote attackers to pass information between arbitrary domains and track user activity, as demonstrated by the domain attribute in the document.cookie variable in a javascript: window.

Mozilla Firefox allows for cookies to be set with a null domain (aka "domainless cookies"), which allows remote attackers to pass information between arbitrary domains and track user activity, as demonstrated by the domain attribute in the document.cookie variable in a javascript: window.

EPSS

Процентиль: 48%
0.0025
Низкий

Связанные уязвимости

ubuntu
около 18 лет назад

Mozilla Firefox allows for cookies to be set with a null domain (aka "domainless cookies"), which allows remote attackers to pass information between arbitrary domains and track user activity, as demonstrated by the domain attribute in the document.cookie variable in a javascript: window.

nvd
около 18 лет назад

Mozilla Firefox allows for cookies to be set with a null domain (aka "domainless cookies"), which allows remote attackers to pass information between arbitrary domains and track user activity, as demonstrated by the domain attribute in the document.cookie variable in a javascript: window.

debian
около 18 лет назад

Mozilla Firefox allows for cookies to be set with a null domain (aka " ...

EPSS

Процентиль: 48%
0.0025
Низкий