CVE-2024-5699

2024-06-1113:15:51

[email protected]

web.nvd.nist.gov

violation of spec

cookie prefixes

case-insensitive comparison

incorrect browser behavior

firefox 127

0.0004 Low

EPSS

Percentile

9.1%

JSON

In violation of spec, cookie prefixes such as __Secure were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparison. This could have resulted in the browser not correctly honoring the behaviors specified by the prefix. This vulnerability affects Firefox < 127.