Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1964767 | Permissions Required |
| https://www.mozilla.org/security/advisories/mfsa2025-56/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2025-59/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2025-61/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2025-63/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
05 Oct 2026, 15:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) Al configurar una cookie sin nombre con un signo igual en su valor, se eclipsaban otras cookies. Incluso si la cookie sin nombre se configuraba mediante HTTP y la cookie eclipsada incluía el atributo “Secure”. Esta vulnerabilidad afecta a Firefox menor que 141, Firefox ESR menor que 140.1, Thunderbird menor que 141 y Thunderbird menor que 140.1. |
30 Sep 2026, 18:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) Al configurar una cookie sin nombre con un signo igual en su valor, se eclipsaban otras cookies. Incluso si la cookie sin nombre se configuraba mediante HTTP y la cookie eclipsada incluía el atributo “Secure”. Esta vulnerabilidad afecta a Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141 y Thunderbird < 140.1. |
Information
Published : 2025-07-22 21:15
Updated : 2026-10-05 15:10
NVD link : CVE-2025-8037
Mitre link : CVE-2025-8037
CVE.ORG link : CVE-2025-8037
JSON object : View
Products Affected
mozilla
- firefox
- thunderbird
CWE
CWE-614
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute