CVE-2023-5722

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 119

Description The issue is related to insufficient protection of service data when processing the Vary header response for matching request headers. An attacker can exploit this by sending iterative requests to learn the size of an opaque response and the contents of a server-supplied Vary header, potentially allowing unauthorized access to protected information.

Recommendations For versions prior to 119, update to Firefox version 119 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information until the update is applied.