CVE-2023-4055

When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expected cookie…

published August 1, 2023

CVSS
—
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expected cookie jar state. This could have caused requests to be sent with some cookies missing. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00733 · 53.8th percentile
Published
2023-08-01T15:01Z
EPSS history
Timeline
  • 01 AUG 15:01Z
    When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expected cookie…
    cvelistv5