Web Cache Poisoning
High · Logic · CWE-444
Description
Unkeyed inputs influence cached responses for other users.
Root cause
Cache keys omit sensitive headers/params.
Impact
Stored XSS via cache, open redirects.
Detection
Param/header cache tests.
Mitigation
Include all inputs in cache key or disable cache.
Secure coding
Vary headers correctly; purge on deploy.
Safe lab example
PortSwigger cache poisoning
Practise related skills in Labs or deepen on Academy library.