Mozilla Firefox up to 122 Response Header Set-Cookie response splitting

Summaryinfo

A vulnerability, which was classified as problematic, has been found in Mozilla Firefox up to 122. Affected by this vulnerability is an unknown functionality of the component Response Header Handler. Performing a manipulation of the argument Set-Cookie results in response splitting. This vulnerability is cataloged as CVE-2024-1551. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Mozilla Firefox up to 122 (Web Browser). This affects an unknown functionality of the component Response Header Handler. The manipulation of the argument Set-Cookie with an unknown input leads to a response splitting vulnerability. CWE is classifying the issue as CWE-443. This weakness can be found at CWE-113. This is going to have an impact on integrity. The summary by CVE is:

Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control the Content-Type response header, as well as control part of the response body, they could inject Set-Cookie response headers that would have been honored by the browser. This vulnerability affects Firefox < 123 and Firefox ESR < 115.8.

The weakness was shared 02/20/2024. It is possible to read the advisory at mozilla.org. This vulnerability is uniquely identified as CVE-2024-1551 since 02/15/2024. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 06/18/2025).

The vulnerability scanner Nessus provides a plugin with the ID 239893 (TencentOS Server 2: thunderbird (TSSA-2024:0085)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 123 eliminates this vulnerability. The upgrade is hosted for download at mozilla.org.

The vulnerability is also documented in the vulnerability database at Tenable (239893). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Web Browser

Vendor

• Mozilla

Name

• Firefox

Version

• 122

License

• open-source

Website

• Vendor: https://www.mozilla.org/
• Product: https://www.mozilla.org/en-US/firefox/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion