description: If an existing cookie is changed to be "HttpOnly" while a document is open, the original value remains accessible through script until that document is closed. Network requests correctly use the changed HttpOnly cookie. This vulnerability affects Firefox < 58.
problem types: The old value of a cookie changed to HttpOnly remains accessible to scripts
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 58, status: affected, version: unspecified, versionType: custom
}