By injecting a cookie with certain... CVE-2022-40958
-
AV
AC
AU
C
I
A
发布：
2022-12-22
修订：
2024-11-21
By injecting a cookie with certain special characters, an attacker on a shared subdomain which is not a secure context could set and thus overwrite cookies from a secure context, leading to session fixation and other attacks. This vulnerability affects Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox < 105.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有3条受影响产品信息
