What Is Web Cache Poisoning? How Can a Cached Response Become a Security Problem?

Here's something that should be completely unremarkable. A user requests /homepage. The origin server generates a response. A cache stores it. The next user requests /homepage. The cache returns the stored response without touching the origin. That's caching working as intended. It reduces latency, saves origin load, and serves popular content...