description: Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined with Range requests might have allowed them to determine the presence or length of a media file. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.
problem types: Service Workers might have learned size of cross-origin media files
affected:
{
vendor: Mozilla
product: Firefox ESR
versions:
version: unspecified, lessThan: 102.5, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Thunderbird
versions:
version: unspecified, lessThan: 102.5, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Firefox
versions:
version: unspecified, lessThan: 107, status: affected, versionType: custom
}
