CVE-2023-29547: Medium severity firefox vulnerability
Published Apr 11, 2023
·Updated
Last updated 24 July 2024
Other sources
When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This could have led to a desynchronization in expected results when reading from the secure cookie.
Affected Software
9 affected componentsFixes available
debian/firefox
131.0-1
Mozilla Firefox<112
112
All of the following
Mozilla Firefox=112
Google Android
All of the following
Mozilla Focus=112
Google Android
Mozilla Firefox<112.0
Mozilla Firefox ESR<102.10
Mozilla Focus Android<112.0
Event History
Apr 11, 2023
CVE Published
12:00 AM
Jun 2, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Data Sourced
05:15 PM
Description
Jan 12, 2024
Data Sourced
via Launchpad·12:19 AM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·02:43 AM
RemedyDescriptionSeverityAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2023-29531
- CVE-2023-29532
- CVE-2023-29533
- CVE-2023-29534
- CVE-2023-1999
- CVE-2023-29535
- CVE-2023-29536
- CVE-2023-29537
- CVE-2023-29538
- CVE-2023-29539
- CVE-2023-29540
- CVE-2023-29541
- CVE-2023-29542
- CVE-2023-29543
- CVE-2023-29544
- CVE-2023-29545
- CVE-2023-29546
- CVE-2023-29547
- CVE-2023-29548
- CVE-2023-29549
- CVE-2023-29550
- CVE-2023-29551
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-29547.
2
What is the severity level of CVE-2023-29547?
The severity level of CVE-2023-29547 is low.
3
Which software versions are affected by CVE-2023-29547?
The software versions affected by CVE-2023-29547 are Firefox for Android versions 112.0+ and Firefox for Ubuntu versions 112.0+.
4
How can I fix CVE-2023-29547?
To fix CVE-2023-29547, update your Firefox for Android or Firefox for Ubuntu to version 112.0+.
5
Where can I find more information about CVE-2023-29547?
You can find more information about CVE-2023-29547 on the Mozilla Security Advisories page.