CVE-2023-29547: Medium severity Mozilla Firefox vulnerability
Last updated 24 July 2024
Other sources
When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This could have led to a desynchronization in expected results when reading from the secure cookie.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 131.0-1 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 112
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2023-29531
- CVE-2023-29532
- CVE-2023-29533
- CVE-2023-29534
- CVE-2023-1999
- CVE-2023-29535
- CVE-2023-29536
- CVE-2023-29537
- CVE-2023-29538
- CVE-2023-29539
- CVE-2023-29540
- CVE-2023-29541
- CVE-2023-29542
- CVE-2023-29543
- CVE-2023-29544
- CVE-2023-29545
- CVE-2023-29546
- CVE-2023-29547
- CVE-2023-29548
- CVE-2023-29549
- CVE-2023-29550
- CVE-2023-29551
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-29547.
What is the severity level of CVE-2023-29547?
The severity level of CVE-2023-29547 is low.
Which software versions are affected by CVE-2023-29547?
The software versions affected by CVE-2023-29547 are Firefox for Android versions 112.0+ and Firefox for Ubuntu versions 112.0+.
How can I fix CVE-2023-29547?
To fix CVE-2023-29547, update your Firefox for Android or Firefox for Ubuntu to version 112.0+.
Where can I find more information about CVE-2023-29547?
You can find more information about CVE-2023-29547 on the Mozilla Security Advisories page.