Skip to content
Sign in
CVE-2024-56999.8CriticalCWE-178

CVE-2024-5699: Mozilla Firefox vulnerability

Mozilla · Firefox

Vendor fix available · Affected: Mozilla Firefox · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.8%probability of exploitation in the next 30 days
56th percentile
050100

Higher than 56% of scored CVEs

9.8CriticalCVSS 3.1
LowCrit.

DescriptionCVE.org

In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparison. This could have resulted in the browser not correctly honoring the behaviors specified by the prefix. This vulnerability affects Firefox < 127.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Mozilla · Firefoxbefore 127

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
Mozilla
Published
June 2024

CoverageNo articles yet

No CyberSIXT article names CVE-2024-5699 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

Updated AboutDevelopersSign in