Related Vulnerabilities: CVE-2022-34472  

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that if a PAC URL was set and the server that hosts the PAC was not reachable, OCSP requests are blocked, resulting in incorrect error pages being shown.

Description

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that if a PAC URL was set and the server that hosts the PAC was not reachable, OCSP requests are blocked, resulting in incorrect error pages being shown.

Additional Information

  • Bugzilla 2102166: CVE-2022-34472 Mozilla: Unavailable PAC file resulted in OCSP requests being blocked
  • CWE-393: Return of Wrong Status Code
  • FAQ: Frequently asked questions about CVE-2022-34472