CVE-2023-29547
11 documents8 sources
Severity
6.5MEDIUM
EPSS
0.2%
top 57.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJun 2
Latest updateJun 13
Description
When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This could have led to a desynchronization in expected results when reading from the secure cookie. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6
Affected Packages7 packages
🔴Vulnerability Details
6CVEList▶
CVE-2023-29547: When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently fa↗2023-06-02
GHSA▶
GHSA-3hwv-cmwg-vxxj: When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently fa↗2023-06-02
📋Vendor Advisories
4Microsoft▶
When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This could have led to a desynchronization i↗2023-06-13
Debian▶
CVE-2023-29547: firefox - When a secure cookie existed in the Firefox cookie jar an insecure cookie for th...↗2023