PT-2024-1980
CVE-2024-1555
·
Published
2024-02-20
·
Updated
2025-03-14
Description by
CVSS 3.1
8.3
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 123
Description
The issue is related to errors in processing SameSite cookies when opening a website using the "firefox://" protocol handler. This could allow a remote attacker to impact the integrity of protected information.
Recommendations
For versions prior to 123, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting the use of the
firefox:// protocol handler until a patch is available.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾