CVE-2023-4055CWE-120

CVE-2023-4055: falha em Mozilla Firefox

Publicada em 01 ago 2023 · Atualizada em 13 fev 2025

Seguir esta CVE + Monitorar Firefox + Monitorar firefox-esr

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.7%

When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expected cookie jar state. This could have caused requests to be sent with some cookies missing. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

Produtos afetados

Mozilla · Firefox Mozilla · Firefox ESR

CVEs relacionadas — Mozilla Firefox

No mesmo produto, das mais perigosas para as menos.

CVE-2016-9079HIGHCVE-2016-9079EPSS 87.4%KEV CVE-2019-11708CRITICALCVE-2019-11708EPSS 55.9%KEV CVE-2019-17026HIGHCVE-2019-17026EPSS 46.3%KEV CVE-2019-11707HIGHCVE-2019-11707EPSS 38.0%KEV CVE-2024-9680CRITICALCVE-2024-9680EPSS 23.2%KEV CVE-2022-26485HIGHCVE-2022-26485EPSS 14.3%KEV

Referências

https://bugzilla.mozilla.org/show_bug.cgi?id=1782561 https://lists.debian.org/debian-lts-announce/2023/08/msg00008.html https://lists.debian.org/debian-lts-announce/2023/08/msg00010.html https://www.debian.org/security/2023/dsa-5464 https://www.debian.org/security/2023/dsa-5469 https://www.mozilla.org/security/advisories/mfsa2023-29/https://www.mozilla.org/security/advisories/mfsa2023-30/https://www.mozilla.org/security/advisories/mfsa2023-31/