vulnerability

Gentoo Linux: CVE-2024-5699: Mozilla Firefox: Multiple Vulnerabilities

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Jun 11, 2024
Added
Aug 7, 2024
Modified
Aug 13, 2025

Description

In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparison. This could have resulted in the browser not correctly honoring the behaviors specified by the prefix. This vulnerability affects Firefox < 127.

Solutions

gentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.