Логотип exploitDog
bind:CVE-2024-1554
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-1554

Количество 5

Количество 5

ubuntu логотип

CVE-2024-1554

почти 2 года назад

The `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers `fetch()` may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a `fetch()` response controlled by the additional headers. Upon navigation to the same URL, the user would see the cached response instead of the expected response. This vulnerability affects Firefox < 123.

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2024-1554

почти 2 года назад

The `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers `fetch()` may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a `fetch()` response controlled by the additional headers. Upon navigation to the same URL, the user would see the cached response instead of the expected response. This vulnerability affects Firefox < 123.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2024-1554

почти 2 года назад

The `fetch()` API and navigation incorrectly shared the same cache, as ...

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-gqrh-wgmr-mm7v

почти 2 года назад

The `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers `fetch()` may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a `fetch()` response controlled by the additional headers. Upon navigation to the same URL, the user would see the cached response instead of the expected response. This vulnerability affects Firefox < 123.

CVSS3: 9.8
EPSS: Низкий
fstec логотип

BDU:2024-01817

почти 2 года назад

Уязвимость функции fetch браузера Mozilla Firefox связанная с ошибками управления ресурсом, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-1554

The `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers `fetch()` may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a `fetch()` response controlled by the additional headers. Upon navigation to the same URL, the user would see the cached response instead of the expected response. This vulnerability affects Firefox < 123.

CVSS3: 9.8
0%
Низкий
почти 2 года назад
nvd логотип
CVE-2024-1554

The `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers `fetch()` may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a `fetch()` response controlled by the additional headers. Upon navigation to the same URL, the user would see the cached response instead of the expected response. This vulnerability affects Firefox < 123.

CVSS3: 9.8
0%
Низкий
почти 2 года назад
debian логотип
CVE-2024-1554

The `fetch()` API and navigation incorrectly shared the same cache, as ...

CVSS3: 9.8
0%
Низкий
почти 2 года назад
github логотип
GHSA-gqrh-wgmr-mm7v

The `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers `fetch()` may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a `fetch()` response controlled by the additional headers. Upon navigation to the same URL, the user would see the cached response instead of the expected response. This vulnerability affects Firefox < 123.

CVSS3: 9.8
0%
Низкий
почти 2 года назад
fstec логотип
BDU:2024-01817

Уязвимость функции fetch браузера Mozilla Firefox связанная с ошибками управления ресурсом, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

CVSS3: 6.5
0%
Низкий
почти 2 года назад

Уязвимостей на страницу