地图 / Web Cache Poisoning on █████

Web Cache Poisoning on █████

注入与走私 / 违反安全设计原则（按标题归类） / #1183263

厂商: U.S. Dept Of Defense
严重程度: 中危
赏金: —
弱点: 违反安全设计原则（按标题归类）
研究员: @fr1nge
披露日期: 2021-06-03
资产: —
CVE: —

该报告还没有中文解读。

原文摘录

摘自原文（9868 字符中的一小部分）

**Description:** The web application `https://████████` uses a web cache to more efficiently serve its pages to the users. An attacker can send a malformed request which the server caches the response of and sends it to the users.

原文中的代码

GET /yeettest?yeettest=1 HTTP/1.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36
Host: www.█████
Connection: …

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 U.S. Dept Of Defense 所有。

时间线

2021-05-03报告提交
2021-06-03公开披露

阅读 HackerOne 原文 ↗作者 @fr1nge · 版权归作者与 U.S. Dept Of Defense 所有

同类报告

Web cache poisoning attack leads to user information and morePostmates · — · $500 Access Token Smuggling from my.playstation.com via Referer HeaderPlayStation · 2021-01-12 · $1,000 Cache Poisoning via uppercase letters in invalid pathInnoGames · — · $550 Cache Poisoning DoS on updates.rockstargames.comRockstar Games · 2021-12-22 Web Cache poisoning attack leads to User information Disclosure and moreLyst · 2022-03-22 Web cache poisoning leads to disclosure of CSRF token and sensitive informationSmule · 2019-07-21