QwikSec

Security Database

CVE

CWE

Training

CVE-2023-4055

Published: Aug 1, 2023

Modified: Feb 13, 2025

PUBLISHED

Description

When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expected cookie jar state. This could have caused requests to be sent with some cookies missing. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

Vendor	Product	Versions
Mozilla	Firefox	affected `unspecified - < 116`
Mozilla	Firefox ESR	affected `unspecified - < 102.14`
Mozilla	Firefox ESR	affected `unspecified - < 115.1`

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1782561

https://www.mozilla.org/security/advisories/mfsa2023-29/

https://www.mozilla.org/security/advisories/mfsa2023-30/

https://www.mozilla.org/security/advisories/mfsa2023-31/

https://www.debian.org/security/2023/dsa-5464

https://www.debian.org/security/2023/dsa-5469

https://lists.debian.org/debian-lts-announce/2023/08/msg00008.html

https://lists.debian.org/debian-lts-announce/2023/08/msg00010.html

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.