Vulnerability Database

298,930

Total vulnerabilities in the database

CVE-2023-29547

When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This could have led to a desynchronization in expected results when reading from the secure cookie. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

  • Published: Jun 2, 2023
  • Updated: Jun 10, 2023
  • CVE: CVE-2023-29547
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

No CWE or OWASP classifications available.

Software From Fixed in
mozilla / focus - 112.0
mozilla / firefox_esr - 102.10
mozilla / firefox - 112.0