Beveiligingsadvies

CVE-2024-5699

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-06-11 12:40:18

Laatst bijgewerkt 2024-08-12 17:08:34

Toegewezen door mozilla

CVSS-score 9.8

Status PUBLISHED

Beschrijving

In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparison. This could have resulted in the browser not correctly honoring the behaviors specified by the prefix. This vulnerability affects Firefox < 127.

← Alle CVE's bekijken Bekijk op cve.org ↗