Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:45581
HistoryFeb 22, 2024 - 4:16 a.m.

Cache Poisoning

2024-02-2204:16:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
cache poisoning
firefox
vulnerability
browser
headers
fetch api

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

firefox is vulnerable to Cache Poisoning. The vulnerability is due to incorrect sharing of cache between the fetch() API and navigation, as the cache key does not include optional headers that fetch() may contain. It allows an attacker could potentially poison the local browser cache by priming it with a fetch() response controlled by additional headers.nstead of the expected response.

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%