CVE-2023-29547
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jun 2, 2023
Updated: Jan 10, 2025
Summary
CVE-2023-29547: A vulnerability was discovered in Firefox and Focus browsers for Android and desktop versions < 112. It allows the creation of an insecure cookie for a domain when a secure one exists, which could lead to unintended behavior and desynchronization of secure cookie data. This issue should have resulted in a silent failure but instead, it enabled the creation of an insecure cookie, potentially jeopardizing user data.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.