CVE-2024-5699

In violation of spec, cookie prefixes such as Secure were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparison. This could have resulted in the browser not correctly honoring the behaviors specified by the prefix. This...

CVE-2024-5699

This vulnerability affects Firefox versions prior to 127 . It is caused by a violation of specifications where cookie prefixes, such as __Secure, were ignored if they were not correctly capitalized. According to the specification, these prefixes should be checked using a case-insensitive comparis...