Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6xv8-mg86-mq56

Опубликовано: 16 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a malicious site to inject arbitrary cookies into requests to an unrelated target domain. This vulnerability was fixed in Firefox for iOS 152.0.

Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a malicious site to inject arbitrary cookies into requests to an unrelated target domain. This vulnerability was fixed in Firefox for iOS 152.0.

EPSS

Процентиль: 1%
0.001
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-345

Связанные уязвимости

CVSS3: 4.3
nvd
около 2 месяцев назад

Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a malicious site to inject arbitrary cookies into requests to an unrelated target domain. This vulnerability was fixed in Firefox for iOS 152.0.

CVSS3: 4.3
debian
около 2 месяцев назад

Firefox for iOS preserved cookies set on the initial PDF request acros ...

EPSS

Процентиль: 1%
0.001
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-345