libsoup Vary Header Caching Vulnerability Leading to Information Disclosure

A vulnerability exists in the libsoup HTTP library's caching mechanism, SoupCache, where the HTTP Vary header is disregarded when assessing cached responses. This header is crucial for ensuring that responses vary according to request headers like language or authentication. The absence of this check can lead to cached content being improperly reused across different requests, potentially revealing sensitive user information. While this flaw is unlikely to impact typical desktop usage, it could cause confidentiality issues in proxy or multi-user environments.

Impact

Exploitation of this vulnerability could result in the unintentional disclosure of sensitive or user-specific information, as cached responses containing confidential data might be served to the wrong users.