EUVD-2008-7246

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Mozilla Firefox before version 4 allows cookie manipulation via HTTP responses due to security flaw

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2008-7293	9 Aug 201119:00	–	cve
Cvelist	CVE-2008-7293	9 Aug 201119:00	–	cvelist
NVD	CVE-2008-7293	9 Aug 201119:55	–	nvd
OpenVAS	Mozilla Firefox Multiple Vulnerabilities (Aug 2011) - Windows	12 Aug 201100:00	–	openvas
OpenVAS	Mozilla Firefox Multiple Vulnerabilities August-11 (Windows)	12 Aug 201100:00	–	openvas
Prion	Design/Logic Flaw	9 Aug 201119:55	–	prion
Tenable Nessus	RHEL 4 : firefox (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2008-7293	3 Mar 202500:00	–	nessus
SUSE CVE	SUSE CVE-2008-7293	15 Feb 202306:05	–	susecve
UbuntuCve	CVE-2008-7293	9 Aug 201119:55	–	ubuntucve

[
  {
    "enisaIdVendor": [
      {
        "id": "144af4c8-8a86-3139-95af-e4e8cb459c66",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "07b72e7f-cfc9-3519-8897-85bfddd0769e",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2008-7293.html
hacks	www.hacks.mozilla.org/2010/08/firefox-4-http-strict-transport-security-force-https/
michael-coates	www.michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html
code	www.code.google.com/p/browsersec/wiki/Part2
scarybeastsecurity	www.scarybeastsecurity.blogspot.com/2011/02/some-less-obvious-benefits-of-hsts.html
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
scarybeastsecurity	www.scarybeastsecurity.blogspot.com/2008/11/cookie-forcing.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2008-7293
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

9High risk

Vulners AI Score9

CVSS 25.8

EPSS0.0059