Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox和SeaMonkey cookies信息泄露漏洞
Vulnerability Description
Firefox是Mozilla所发布的开放源码WEB浏览器。 Mozilla Firefox和SeaMonkey 存在信息泄露漏洞，由于没有限制从web页面访问(1) Set-Cookie 和 (2) Set-Cookie2 HTTP响应头部，预远程攻击者可以通过XMLHttpRequest呼叫从cookies中获得敏感信息，与HTTPOnly保护机制相关。
CVSS Information
N/A
Vulnerability Type
N/A