Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-12551
HistoryMar 01, 2024 - 12:00 a.m.

Mozilla Firefox HTTP Header Injection Vulnerability

2024-03-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
mozilla firefox
http
header injection
vulnerability
set-cookie
response
browser
multipart
exploit
attacker
cnvd

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.3%

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an HTTP header injection vulnerability that stems from a Set-Cookie response header being incorrectly executed in a multipart HTTP response, which can be exploited by an attacker to inject a Set-Cookie response header recognized by the browser.