CVE-2023-5722: Medium severity Mozilla Firefox vulnerability
Last updated 24 July 2024
Other sources
Using iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a server-supplied Vary header.
— Mozilla
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 130.0-2 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 119
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-5722.
What is the severity of CVE-2023-5722?
The severity of CVE-2023-5722 is medium.
Which software is affected by CVE-2023-5722?
Mozilla Firefox versions up to exclusive 119 are affected by CVE-2023-5722.
How can an attacker exploit CVE-2023-5722?
An attacker can exploit CVE-2023-5722 by using iterative requests to learn the size of an opaque response and the contents of a server-supplied Vary header.
Is there any official reference for CVE-2023-5722?
Yes, you can find more information about CVE-2023-5722 in the following references: 1. [Mozilla Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1738426) 2. [Mozilla Security Advisories](https://www.mozilla.org/en-US/security/advisories/mfsa2023-45/)