An attacker with temporary script access to a site could have set a cookie containing invalid characters using `document.cookie` that could have led to unknown errors. This vulnerability affects Firefox < 119.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade librewolfUpgrade firefox | Aug 22, 2024 | Oct 24, 2023 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Jan 8, 2024 | Oct 25, 2023 |
| Mfsa2023 45 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 119.0 | Oct 25, 2023 | Oct 24, 2023 |
| Suse | — | Upgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox | Oct 27, 2023 | Oct 25, 2023 |
| Ubuntu | — | Upgrade firefox | Nov 1, 2023 | Oct 25, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub