Collected research
Weird Vulnerabilities Happening on Load Balancers, Shallow Copies and Caches
Four bug bounty cases where one user's data reached another: a load balancer returning a stranger's email when a cookie was absent, a whitelist of 17 addresses left in a script block, a shallow-copied object cached with other customers' data, and a CDN caching a JavaScript file holding the victim's Authorization header under an attacker-chosen parameter.
Record
- Researcher
- Ozgur Alp and @ozgur_bbh
- Published by
- Medium
- Date
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Ozgur Alp and @ozgur_bbh, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .