Cache Deception
Medium · Logic · CWE-525
Description
Attacker tricks cache to store private content at public URL.
Root cause
Path confusion + cache rules.
Impact
Private data served to others.
Detection
Cache behavior testing.
Mitigation
Never cache authenticated responses on shared URLs.
Secure coding
Cache-Control: private on sensitive routes.
Safe lab example
Cache deception labs
Practise related skills in Labs or deepen on Academy library.