REDHAT-BUG-2362651: Medium severity libsoup vulnerability
Published Apr 28, 2025
·Updated
When handling cookies, libsoup clients improperly validate domain names containing uppercase characters, allowing malicious websites to set cookies for public suffix domains and bypass expected isolation boundaries.
Affected Software
1 affected component
Gnome libsoup
Event History
Apr 28, 2025
Data Sourced
via Red Hat·06:27 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2362651?
The severity of REDHAT-BUG-2362651 is classified as medium due to its potential to allow cookie misuse.
2
How do I fix REDHAT-BUG-2362651?
To remediate REDHAT-BUG-2362651, update to the latest version of libsoup where the issue is addressed.
3
What causes the vulnerability in REDHAT-BUG-2362651?
The vulnerability in REDHAT-BUG-2362651 is caused by improper validation of domain names containing uppercase characters in cookie handling.
4
Who is affected by REDHAT-BUG-2362651?
Clients using the GNOME libsoup library are affected by REDHAT-BUG-2362651.
5
What are the implications of exploiting REDHAT-BUG-2362651?
Exploiting REDHAT-BUG-2362651 can lead to cookie theft or session hijacking from public suffix domains.