Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-9d41-nsk6-sufx
Vulnerability ID VCID-9d41-nsk6-sufx
Aliases CVE-2008-5505
Summary Security researcher Hish reported that the persist attribute in XUL elements can be used to store cookie-like information on a user's computer which could later be read by a website. This creates a privacy issue for users who have a non-standard cookie preference and wish to prevent sites from setting cookies on their machine. Even with cookies turned off, this issue could be used by a website to write persistent data in a user's browser and track the user across browsing sessions. Additionally, this issue could allow a website to bypass the limits normally placed on cookie size and number.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00833 https://api.first.org/data/v1/epss?cve=CVE-2008-5505
generic_textual low https://www.mozilla.org/en-US/security/advisories/mfsa2008-63
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5505.json
https://api.first.org/data/v1/epss?cve=CVE-2008-5505
476274 https://bugzilla.redhat.com/show_bug.cgi?id=476274
CVE-2008-5505 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5505
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2008-63 https://www.mozilla.org/en-US/security/advisories/mfsa2008-63
RHSA-2008:1036 https://access.redhat.com/errata/RHSA-2008:1036
USN-690-1 https://usn.ubuntu.com/690-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.74898
EPSS Score 0.00833
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T08:27:32.809016+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2008/mfsa2008-63.md 38.6.0