{“lastseen”:”2025-10-14T17:19:37″,”description”:”Packet Storm was missing a cache control header on the user settings page, allowing for parties to click back in…”,”published”:”2025-10-13T00:00:00″,”modified”:”2025-10-13T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 Packet Storm Missing Cache Header”,”source”:””,”references”:””,”id”:”PACKETSTORM:210463″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[],”sourceData”:”*Improper cache control-*\\n \\n The improper cache control vulnerability refers to a security flaw that\\n arises when a web application does not properly manage or control caching\\n mechanisms. Caching is an essential technique used to improve performance\\n by storing frequently accessed data in temporary storage, such as the\\n client’s browser or intermediate proxy servers. However, when caching is\\n not adequately controlled, sensitive or private information may be\\n inadvertently stored and exposed to unauthorized users.\\n \\n *Steps to reproduce-*\\n \\n 1) Go To site settings\\n 2) Do logout\\n 3) click back you can see sensitive info\\n \\n *Impact-*\\n \\n Exploiting the improper cache control vulnerability can have serious\\n consequences, including the following: a. Information Disclosure: Sensitive\\n user data, such as personal information, authentication tokens, or\\n confidential documents, may be cached on intermediate systems or the\\n client’s browser. This can lead to unauthorized access, data leakage, or\\n identity theft.\\n \\n Cache Poisoning: Attackers can manipulate the cached data to serve\\n malicious content to unsuspecting users, leading to various attacks, such\\n as cross-site scripting (XSS), drive-by downloads, or injection attacks.\\n \\n \\n —\\n Packet Storm note:\\n \\n 2025\/10\/13: \\n \\n We were indeed missing a cache header for the page in question. There wasn’t a mechanism to commit cache poisoning or xss, but as shared computing is a thing, we addressed it so local caches did not persist post logout. We would like to extend our thanks to Shivang Singhal for reporting the issue.”,”sourceHref”:”https:\/\/packetstorm.news\/download\/210463″,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/packetstorm.news\/files\/id\/210463\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-10-14T17:19:37″,”description”:”Packet Storm was missing a cache control header on the user settings page, allowing for parties to click back in…”,”published”:”2025-10-13T00:00:00″,”modified”:”2025-10-13T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 Packet Storm Missing Cache Header”,”source”:””,”references”:””,”id”:”PACKETSTORM:210463″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[],”sourceData”:”*Improper…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,12,13,33,53,7,11,5],"class_list":["post-21507","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-packetstorm","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n