Preliminary research
Cache key injection: Smuggling poison through the door
AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.
Nginx case studies show how ambiguous cache-key boundaries can map distinct requests to the same cached response. The article examines conditional cache poisoning and disclosure risks and distinguishes upstream host defaults from custom request-derived keys.
Record
- Researcher
- Alex Brumen
- Published by
- YesWeHack
- Date
- Topic
- Injection
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Alex Brumen, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .