Описание
Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the Secure
attribute. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.
Релиз | Статус | Примечание |
---|---|---|
devel | not-affected | code not present |
jammy | not-affected | code not present |
noble | not-affected | code not present |
plucky | not-affected | code not present |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
esm-apps/noble | ignored | |
jammy | ignored | |
noble | ignored | |
plucky | DNE | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | ignored | |
jammy | DNE | |
noble | ignored | |
plucky | ignored | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
esm-apps/bionic | needs-triage | |
jammy | DNE | |
noble | DNE | |
plucky | DNE | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
esm-apps/focal | ignored | |
esm-infra/bionic | ignored | |
jammy | DNE | |
noble | DNE | |
plucky | DNE | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
esm-infra/focal | ignored | |
jammy | DNE | |
noble | DNE | |
plucky | DNE | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
esm-apps/jammy | ignored | |
jammy | ignored | |
noble | DNE | |
plucky | DNE | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
jammy | ignored | |
noble | DNE | |
plucky | DNE | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | not-affected | code not present |
jammy | not-affected | code not present |
noble | not-affected | code not present |
plucky | not-affected | code not present |
upstream | released | 140.1,141 |
Показывать по
Ссылки на источники
9.1 Critical
CVSS3
Связанные уязвимости
Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.
Setting a nameless cookie with an equals sign in the value shadowed ot ...
Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
9.1 Critical
CVSS3