| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≤ 57.0.4 |
If an existing cookie is changed to be "HttpOnly" while a document is open, the original value remains accessible through script until that document is closed. Network requests correctly use the changed HttpOnly cookie. This vulnerability affects Firefox < 58.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free