Cache configuration change leading to account vulnerability | Dark Hacker News

Dark Hacker News

new|best|ask|show|jobs

Built with the HackerNews API. Developed by LJT.AI

Note: The HackerNews API provides up to 500 stories per category

Cache configuration change leading to account vulnerability | Dark Hacker News

Cache configuration change leading to account vulnerability(loom.com)

3 points by cfabianski 3 years ago | 1 comment

cfabianski 3 years ago |

We wrote about it here https://www.bearer.com/blog/loom-express-session-incident and we also updated the famous NodeGoat project to bring more awareness around that kind of mis configuration https://github.com/OWASP/NodeGoat/pull/286