description: By injecting a cookie with certain special characters, an attacker on a shared subdomain which is not a secure context could set and thus overwrite cookies from a secure context, leading to session fixation and other attacks. This vulnerability affects Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox < 105.
problem types: Bypassing Secure Context restriction for cookies with __Host and __Secure prefix
affected:
{
vendor: Mozilla
product: Firefox ESR
versions:
version: unspecified, lessThan: 102.3, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Thunderbird
versions:
version: unspecified, lessThan: 102.3, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Firefox
versions:
version: unspecified, lessThan: 105, status: affected, versionType: custom
}
