New Cache Key Injection Attack Lets Hackers Bypass Access Controls and Poison Nginx Caches

A newly disclosed cache poisoning technique dubbed cache key injection can enable attackers to bypass access controls, expose cached sensitive content, trigger denial-of-service conditions, and potentially plant stored cross-site scripting payloads in vulnerable Nginx deployments. The research, published by YesWeHack researcher Alex Brumen, shifts... Weiterlesen