curl: Cache purge requests are not authenticated

Vulnerability description not provided...

Fastly VDP: Cache purge requests are not authenticated

Vulnerability description not provided...

New Relic: Cache purge requests are not authenticated

Hello there, Anyone can issue a PURGE request for any resource and invalidate your caches. That can lead to increased bandwidth costs but also potential Denial of Service attacks. Proof Fetching the resource headers, we can see in the X-Cache that the resource was a HIT with X-Cache-Hits: 50: $...