CVE-2025-4035

A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set cookies for domains it does not own, potentially leading to integrity issues such as session fixation.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/errata/RHSA-2025:8128
https://access.redhat.com/security/cve/CVE-2025-4035
https://bugzilla.redhat.com/show_bug.cgi?id=2362651

Configurations

No configuration.

History

26 May 2025, 12:15

Type	Values Removed	Values Added
References		() https://access.redhat.com/errata/RHSA-2025:8128 -
Summary		(es) Se detectó una falla en libsoup. Al gestionar cookies, los clientes de libsoup permiten erróneamente la configuración de cookies para dominios con sufijos públicos si el dominio contiene al menos dos componentes e incluye una mayúscula. Esto ignora las protecciones de sufijos públicos y podría permitir que un sitio web malicioso configure cookies para dominios que no le pertenecen, lo que podría provocar problemas de integridad como la fijación de sesiones.

29 Apr 2025, 13:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-04-29 13:15

Updated : 2025-05-26 12:15

NVD link : CVE-2025-4035

Mitre link : CVE-2025-4035

CVE.ORG link : CVE-2025-4035

JSON object : View

Products Affected

No product.

CWE

CWE-178

Improper Handling of Case Sensitivity

{"id": "CVE-2025-4035", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2025-04-29T13:15:45.407", "references": [{"url": "https://access.redhat.com/errata/RHSA-2025:8128", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2025-4035", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362651", "source": "secalert@redhat.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-178"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set cookies for domains it does not own, potentially leading to integrity issues such as session fixation."}, {"lang": "es", "value": "Se detect\u00f3 una falla en libsoup. Al gestionar cookies, los clientes de libsoup permiten err\u00f3neamente la configuraci\u00f3n de cookies para dominios con sufijos p\u00fablicos si el dominio contiene al menos dos componentes e incluye una may\u00fascula. Esto ignora las protecciones de sufijos p\u00fablicos y podr\u00eda permitir que un sitio web malicioso configure cookies para dominios que no le pertenecen, lo que podr\u00eda provocar problemas de integridad como la fijaci\u00f3n de sesiones."}], "lastModified": "2025-05-26T12:15:23.837", "sourceIdentifier": "secalert@redhat.com"}

4.3 /10