description: Using the <code>S.browser_fallback_url parameter</code> parameter, an attacker could redirect a user to a URL and cause SameSite=Strict cookies to be sent.<br>*This issue only affects Firefox for Android. Other operating systems are not affected.*. This vulnerability affects Firefox < 107.
problem types: SameSite=Strict cookies could have been sent cross-site via intent URLs
affected:
{
vendor: Mozilla
product: Firefox
versions:
version: unspecified, lessThan: 107, status: affected, versionType: custom
}