CWE-524: Use of Cache Containing Sensitive Information
The code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- undici undici vulnerable to cross-user information disclosure via cross-origin redirect revalidation 5.9 Medium
- undici undici vulnerable to cross-user cache disclosure via same-origin redirect 6.5 Medium
- undici undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hops 7.4 High
- elastic elasticsearch Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure 4.2 Medium
- djangoproject django Potential exposure of private data via empty and missing Vary headers 2.3 Low
- eclipse foundation vert.x CachingWebClient shares user-specific HTTP responses across users via the shared cache tier 7.5 High
- emrevona wp fastest cache – wordpress cache plugin WP Fastest Cache <= 1.5.3 - Unauthenticated Sensitive Information Exposure via Cached wp-activate.php Response 5.9 Medium
- wpovernight pdf invoices & packing slips for woocommerce PDF Invoices & Packing Slips for WooCommerce <= 5.16.5 - Unauthenticated Sensitive Information Exposure via Yearly-Reset Invoice Attachment Cache 5.3 Medium
- apache software foundation camel Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token Cache 4.8 Medium
- gitlab Use of Cache Containing Sensitive Information in GitLab 3.5 Low
- apache software foundation cocoon Apache Cocoon: Cross-user cache poisoning 7.5 High
- apache camel Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token Cache 4.8 Medium
- nodejs undici undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects 7.4 High
- softaculous speedycache – cache, optimization, performance SpeedyCache <= 1.4.2 - Unauthenticated Sensitive Information Exposure via Insecure Cache Configuration via Cache Write Gate Missing comment_author_* Cookie Check 3.7 Low
- contao Contao: Improper access control in the table access voter 4.3 Medium
- vllm vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle 3.1 Low
- vercel next.js Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages 6.3 Medium
- vercel next.js next.js cache leak on warm `use cache` handlers accessing root param 6.3 Medium
- google mcp-toolbox-sdk-python Token Cache Reuse in mcp-toolbox-sdk-python 9.1 Critical
- kornelski http-cache-semantics http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale 8.7 High
- zenhive mpp mpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared caches 6.3 Medium
- angular Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent` 4.0 Medium
- ash-project ash authentication oauth2 server ash_authentication_oauth2_server serves tenant-specific OAuth metadata as publicly cacheable without Vary, enabling cross-tenant confusion 6.3 Medium
-
libcatalyst-plugin-static-simple-perlDebian,perl-Catalyst-Plugin-Static-SimpleMageia +1 more Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable 5.7 Medium - django cms association django-cms django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning) 4.8 Medium
-
geolensPyPI GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4) No score - netty Netty: Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite 6.5 Medium
- nodejs undici undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches 6.5 Medium
- @clerk nuxt Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients 7.5 High
- suse neuvector Potential information leakage from manager /network/graph API in NeuVector 7.3 High
- nodejs undici undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives 5.9 Medium
- regularlabs.com articles anywhere extension for joomla, users anywhere extension for joomla +1 more Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension 7.5 High
- regularlabs.com articles anywhere extension for joomla, conditional content extension for joomla, modules anywhere extension for joomla +4 more +6 more Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions 7.5 High
- directus Directus: Authorization-dependent response served from unsegmented cache key 8.6 High
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 more PAN-OS: Information Disclosure Vulnerability in Management Web Interface 2.1 Low
- openwebui open webui, open-webui +1 more Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse) 3.5 Low
- djangoproject django Potential exposure of private data via cached Set-Cookie response 2.3 Low
- api-platform core, api-platform/hal, api-platform/json-api +2 more API Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate 5.9 Medium
- powerdns recursor Information about ECS zero scoped answers might leak to clients that use a specific ECS 5.3 Medium
- tryghost ghost Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header 9.6 Critical
- tenable identity exposure Insecure Public Caching on REST API Endpoints in Tenable Identity Exposure 8.5 High
- angular Angular: Request Credential & Cache Policy Stripping in Angular Service Worker 5.7 Medium
- angular Angular: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache 8.2 High
- angular Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities 5.7 Medium
- typesense Improper Search Cache Isolation for Scoped Search API Keys in Typesense 6.0 Medium
- spring framework, vmware spring framework +1 more Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux 5.9 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 more drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise 7.0 High
- djangoproject django Potential exposure of private data via missing Vary: Authorization in UpdateCacheMiddleware 2.3 Low
- joomla joomla\!, joomla! project cms +1 more Joomla! Core - [20260517] - Incorrect Cache Key Construction for InputFilter objects 7.5 High
- discourse Discourse: Cached outdated summaries can leak removed content 5.3 Medium
- Show olderLoading…