Multiple caching service providers are vulnerable to HTTP cache poisoning

ronjor · Jan 14, 2020

Vulnerability Note VU#335217
Original Release Date: 2020-01-14 | Last Revised: 2020-01-14

Overview
A Content Delivery Network (CDN) is a distributed network of proxy servers that deliver web content collected from a back end web server using a temporary local storage called a cache. HTTP cache poisoning is a type of attack that allows a remote attacker to inject arbitrary content using unsanitized HTTP headers to poison the remote cache of a CDN. Once an attacker has successfully injected malicious content, future visitors accessing the compromised website will collect and execute the attacker’s injected scripts.
Click to expand...

Log in or Sign up

Multiple caching service providers are vulnerable to HTTP cache poisoning

ronjor Global Moderator

Log in or Sign up

Multiple caching service providers are vulnerable to HTTP cache poisoning

ronjor Global Moderator

Useful Searches