CVE-2025-4035: Libsoup: cookie domain validation bypass via uppercase characters in libsoup
Description
A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set cookies for domains it does not own, potentially leading to integrity issues such as session fixation.
Classification
CVE ID: CVE-2025-4035
CVSS Base Severity: MEDIUM
CVSS Base Score: 4.3
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Problem Types
Improper Handling of Case SensitivityAffected Products
Vendor: Red Hat
Product: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.03% (probability of being exploited)
EPSS Percentile: 6.71% (scored less or equal to compared to others)
EPSS Date: 2025-05-28 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2025-4035https://access.redhat.com/security/cve/CVE-2025-4035
https://bugzilla.redhat.com/show_bug.cgi?id=2362651