Collected research

Web Cache Deception Escalates!

Seyed Ali Mirheidari, Matteo Golinelli, Kaan Onarlioglu, Engin Kirda and Bruno Crispo · usenix.org

Web cache deception tricks a caching proxy into storing pages that hold another user's secrets by requesting them with a fake static-file suffix. Replacing injected markers with page-identicality and cache-header heuristics lets any site be tested; 1188 of the Alexa Top 10K were vulnerable, leaking CSRF tokens and CSP nonces from pages behind no login at all.

Record

Researcher

Seyed Ali Mirheidari, Matteo Golinelli, Kaan Onarlioglu, Engin Kirda and Bruno Crispo

Published by

usenix.org

Format

Whitepaper

Topic

HTTP

In the archive

• Collected in the 2021 research round

Related sources

• USENIX Security '20 - Cached and Confused: Web Cache Deception in the Wild

Tags

• cache-deception
• cache
• cdn
• url-parsing
• info-leak
• http
• proxy
• large-scale-scan
• measurement-study

This page is the archive's own catalogue record. The research is the work of Seyed Ali Mirheidari, Matteo Golinelli, Kaan Onarlioglu, Engin Kirda and Bruno Crispo, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 14 August 2026.