Cache configuration change leading to account vulnerability

Posted by cfabianski on Tuesday March 21, 2023 @12:41PM
from the loom.com dept.

( 1 comment | on HN )

Re:Cache configuration change leading to account vulnerability by cfabianski on Tuesday March 21, 2023 @12:42PM (#35248771)

We wrote about it here https://www.bearer.com/blog/loom-express-session-incident and we also updated the famous NodeGoat project to bring more awareness around that kind of mis configuration https://github.com/OWASP/NodeGoat/pull/286

[ Parent | on HN ]