An attacker with temporary script access to a site could have set a cookie containing invalid characters using `document.cookie` that could have led to unknown errors. This vulnerability affects Firefox < 119.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade librewolfUpgrade firefox | Aug 22, 2024 | Oct 24, 2023 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Jan 8, 2024 | Oct 25, 2023 |
| Mfsa2023 45 | — | Upgrade to Mozilla Firefox version 119.0 | Oct 25, 2023 | Oct 24, 2023 |
| Suse | — | Upgrade mozillafirefox-translations-otherUpgrade mozillafirefoxUpgrade mozillafirefox-develUpgrade mozillafirefox-translations-commonUpgrade mozillafirefox-branding-upstream | Oct 27, 2023 | Oct 25, 2023 |
| Ubuntu | — | Upgrade firefox | Nov 1, 2023 | Oct 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub