90 matches found
Django: `Vary` cache-key conflation of absent and empty request fields
A cache-key generation vulnerability was identified in Django's cache middleware that conflated absent and empty request fields nominated by Vary headers. When a request header was absent versus present with an empty value, the same cache key was generated, causing responses intended for one...
6AI score
SaveExploits0
20