CVE-2024-1554

Description

The `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers `fetch()` may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a `fetch()` response controlled by the additional headers. Upon navigation to the same URL, the user would see the cached response instead of the expected response. This vulnerability affects Firefox < 123.

Weakness classification

• 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-345

Primary references

• security@mozilla.org — Exploit, Issue Tracking
• security@mozilla.org — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory