CVE-2023-5722

—

CVSS 3.1

5.3 medium

EPSS

<1%p49

Published

Oct 25, 2023 (Oct 25, 2023)

Modified

Jun 17, 2026

Description

Using iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a server-supplied Vary header. This vulnerability affects Firefox < 119.

Vendors: mozilla
Products: firefox
Weakness: CWE-203
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.