Vulnerabilities Affecting SameSite Cookie Protections in Firefox and Thunderbird

Two vulnerabilities have been identified affecting SameSite cookie protections in Firefox and Thunderbird. CVE-2022-45410, published on December 22, 2022, impacts Firefox ESR versions below 102.5 and Thunderbird versions below 102.5, while CVE-2024-6611, published on July 9, 2024, affects Firefox versions below 128 and Thunderbird versions below 128. Both vulnerabilities allow for potential cross-site request forgery attacks due to improper handling of cookies.