CVE-2024-1554

N/A

The `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers `fetch()` may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a `fetch()` response controlled by the additional headers. Upon navigation to the same URL, the user would see the cached response instead of the expected response. This vulnerability affects Firefox < 123.

N/A

N/A

Mozilla Firefox 安全漏洞

Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。 Mozilla Firefox 123 版本之前存在安全漏洞，该漏洞源于 fetch() API 和导航错误地共享相同的缓存。

N/A

N/A