Xiaofeng Zheng

A validation issue existed in the parsing of 407 responses, which was addressed through improved response validation.

The issue arises from the improper consideration of uppercase-versus-lowercase distinction during cookie parsing in CFNetwork. This allows remote web servers to overwrite cookies.

The issue arises from the CFNetwork Proxies component's improper handling of a Set-Cookie header within a response to an HTTP CONNECT request. This allows remote proxy servers to conduct cookie-injection attacks via a crafted response. The vulnerability can be exploited by a remote attacker to inject cookies using a specially formed request.

The issue is related to the CFNetwork HTTPProtocol component, which allows remote attackers to bypass the HSTS protection mechanism. This can be achieved via a crafted URL, potentially leading to the exposure of sensitive information.

The issue is related to the CFNetwork Cookies component, which allows remote attackers to track users. This is due to a lack of protection for service data, enabling a remote attacker to exploit the issue and track users.

The issue allows remote attackers to conduct a BREACH attack and determine the CSRF token via a series of crafted requests. This is due to invalid language values in unknown-language error responses that contain a CSRF token and may be sent with HTTP compression.