Web Cache Poisoning

High Severity Technical Guide

Vulnerability Description

Web Cache Poisoning occurs when an attacker manipulates HTTP request headers to force the caching server to store a harmful or modified response, serving it to subsequent users.

Remediation Guide

To resolve this vulnerability, follow these config changes or developer practices:

Do not use unkeyed inputs (like custom headers) in cached responses. Enforce strict cache control parameters and validate incoming request headers.

Verify Your Fix

After applying the remediation, run an external attack-surface scan to verify that the vulnerability is no longer detected by WebScanify.

Is your website vulnerable?

Run a free security scan now to identify missing headers, outdated JS, and other deployment vulnerabilities.