Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-893r-mpwj-qhhg

Опубликовано: 11 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In violation of spec, cookie prefixes such as __Secure were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparison. This could have resulted in the browser not correctly honoring the behaviors specified by the prefix. This vulnerability affects Firefox < 127.

In violation of spec, cookie prefixes such as __Secure were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparison. This could have resulted in the browser not correctly honoring the behaviors specified by the prefix. This vulnerability affects Firefox < 127.

EPSS

Процентиль: 62%
0.00469
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-178

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 1 года назад

In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparison. This could have resulted in the browser not correctly honoring the behaviors specified by the prefix. This vulnerability affects Firefox < 127.

CVSS3: 9.8
nvd
больше 1 года назад

In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparison. This could have resulted in the browser not correctly honoring the behaviors specified by the prefix. This vulnerability affects Firefox < 127.

msrc
3 месяца назад

In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparison. This could have resulted in the browser not correctly honoring the behaviors specified by the prefix. This vulnerability affects Firefox < 127.

CVSS3: 9.8
debian
больше 1 года назад

In violation of spec, cookie prefixes such as `__Secure` were being ig ...

CVSS3: 9.8
fstec
больше 1 года назад

Уязвимость веб-браузера Firefox, связанная с недостаточной проверкой регистра, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

EPSS

Процентиль: 62%
0.00469
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-178