Set-Cookie response headers were... CVE-2024-1551
-
AV
AC
AU
C
I
A
发布：
2024-02-20
修订：
2024-03-04
Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control the Content-Type response header, as well as control part of the response body, they could inject Set-Cookie response headers that would have been honored by the browser. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.
漏洞利用/PoC
当前有5条漏洞利用/PoC
受影响的平台与产品
当前有0条受影响产品信息
