CVE-2023-3482

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of…

published July 5, 2023

CVSS
—
EPSS
1%
Percentile
46.7
In the wild
Unconfirmed
What it is

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00575 · 46.7th percentile
Published
2023-07-05T09:01Z
EPSS history
Timeline
  • 05 JUL 09:01Z
    When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of…
    cvelistv5