← Database

CVE-2022-45413

MEDIUM CVSS: 6.1 Published: 2022-12-22 Modified: 2026-06-17

Description

Using the S.browser_fallback_url parameter parameter, an attacker could redirect a user to a URL and cause SameSite=Strict cookies to be sent.
*This issue only affects Firefox for Android. Other operating systems are not affected.*. This vulnerability affects Firefox < 107.

Affected Platforms

Mozilla FirefoxGoogle Android

Weakness Type

CWE-601, CWE-601

References