CWE-524 · Information Disclosure
Use of Cache Containing Sensitive Information
82CVEs
SortMost likely exploited
82 CVEs with CWE-524 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-24027A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s extern…Facebook · WhatsApp Business for Android · 2021-04-06 | – | 3.8% | 2021-04-06 |
| CVE-2019-9495The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patternsWi-Fi Alliance · hostapd with EAP-pwd support · 2019-04-17 | – | 3.5% | 2019-04-17 |
| CVE-2019-14997The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn details about other users, including their username, via an information expose th…Atlassian · Jira · 2019-09-11 | – | 1.2% | 2019-09-11 |
| CVE-2024-0874Coredns: cd bit response is cached and served laterRed Hat · Red Hat OpenShift Container Platform 4.13 · CVSS 5.3 · 2024-04-25 | 5.3 | 0.8% | 2024-04-25 |
| CVE-2026-82755ash_authentication_oauth2_server serves tenant-specific OAuth metadata as publicly cacheable without Vary, enabling cross-tenant confusionash-project · ash_authentication_oauth2_server · CVSS 6.3 · 2026-09-07 | 6.3 | 0.7% | 2026-09-07 |
| CVE-2024-45596Directus's session is cached for OpenID and OAuth2 if `redirect` is not useddirectus · directus · CVSS 7.4 · 2024-09-10 | 7.4 | 0.7% | 2024-09-10 |
| CVE-2021-44854An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The REST API publicly caches results from private wikis.Mediawiki · Mediawiki · CVSS 5.3 · 2022-12-26 | 5.3 | 0.7% | 2022-12-26 |
| CVE-2024-27917Shopware's session is persistent in Cache for 404 pagesshopware · shopware · CVSS 7.5 · 2024-03-06 | 7.5 | 0.6% | 2024-03-06 |
| CVE-2026-93748http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stalekornelski · http-cache-semantics · CVSS 7.5 · 2026-09-18 | 7.5 | 0.6% | 2026-09-18 |
| CVE-2022-3292Use of Cache Containing Sensitive Information in ikus060/rdiffwebikus060 · ikus060/rdiffweb · CVSS 4.3 · 2022-09-28 | 4.3 | 0.6% | 2022-09-28 |
| CVE-2026-89186mpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared cachesZenHive · mpp · CVSS 6.3 · 2026-09-16 | 6.3 | 0.5% | 2026-09-16 |
| CVE-2023-37486Information Disclosure vulnerability in SAP Commerce (OCC API)SAP_SE · SAP Commerce (OCC API) · CVSS 5.9 · 2023-08-08 | 5.9 | 0.5% | 2023-08-08 |
| CVE-2026-85317Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token CacheApache Software Foundation · Apache Camel · CVSS 4.8 · 2026-10-19 | 4.8 | 0.5% | 2026-10-19 |
| CVE-2026-24472Hono cache middleware ignores "Cache-Control: private" leading to Web Cache Deceptionhonojs · hono · CVSS 5.3 · 2026-01-27 | 5.3 | 0.5% | 2026-01-27 |
| CVE-2026-71316Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clientsnuxt · nuxt · CVSS 7.5 · 2026-08-05 | 7.5 | 0.5% | 2026-08-05 |
| CVE-2026-94543Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applicationsvercel · next.js · CVSS 6.3 · 2026-10-02 | 6.3 | 0.5% | 2026-10-02 |
| CVE-2019-11244kubectl creates world-writeable cached schema filesKubernetes · Kubernetes · CVSS 3.3 · 2019-04-22 | 3.3 | 0.5% | 2019-04-22 |
| CVE-2026-61836Directus: Authorization-dependent response served from unsegmented cache keydirectus · directus · CVSS 8.6 · 2026-07-15 | 8.6 | 0.5% | 2026-07-15 |
| CVE-2025-9901Libsoup: improper handling of http vary header in libsoup cachingRed Hat · Red Hat Enterprise Linux 10 · CVSS 5.9 · 2025-09-03 | 5.9 | 0.5% | 2025-09-03 |
| CVE-2026-113593Potential exposure of private data via empty and missing Vary headersdjangoproject · Django · CVSS 3.1 · 2026-11-03 | 3.1 | 0.5% | 2026-11-03 |
| CVE-2026-108088Apache Cocoon: Cross-user cache poisoningApache Software Foundation · Apache Cocoon · CVSS 7.5 · 2026-10-20 | 7.5 | 0.5% | 2026-10-20 |
| CVE-2026-40012Information about ECS zero scoped answers might leak to clients that use a specific ECSPowerDNS · Recursor · CVSS 5.3 · 2026-06-25 | 5.3 | 0.5% | 2026-06-25 |
| CVE-2026-53943Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview headerTryGhost · Ghost · CVSS 9.6 · 2026-06-24 | 9.6 | 0.4% | 2026-06-24 |
| CVE-2026-92443The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or Proxy-Authorization to different callers.Kong Inc. · Kong Gateway Enterprise · CVSS 8.2 · 2026-11-10 | 8.2 | 0.4% | 2026-11-10 |
| CVE-2026-92442The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller to be served to anothe…Kong Inc. · Kong Gateway Enterprise · CVSS 8.3 · 2026-11-10 | 8.3 | 0.4% | 2026-11-10 |
| CVE-2026-123041The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client from its cache key, allowing a cached callout response for a…Kong Inc. · Kong Gateway Enterprise · CVSS 8.2 · 2026-11-10 | 8.2 | 0.4% | 2026-11-10 |
| CVE-2023-45696HCL Sametime is impacted by an autocomplete enabled vulnerabilityHCL Software · HCL Sametime · CVSS 4 · 2024-02-10 | 4.0 | 0.4% | 2024-02-10 |
| CVE-2026-25540Mastodon's signature-dependent ActivityPub collection responses cached under signature-independent keys (Web Cache Poisoning via `Rails.cache`)mastodon · mastodon · CVSS 6.5 · 2026-02-04 | 6.5 | 0.4% | 2026-02-04 |
| CVE-2026-48588Potential exposure of private data via cached Set-Cookie responsedjangoproject · Django · CVSS 4.2 · 2026-07-07 | 4.2 | 0.4% | 2026-07-07 |
| CVE-2026-50170Angular: Information Leak via Default Caching of Credentialed Requests in HttpTransferCacheangular · angular · CVSS 8.2 · 2026-06-22 | 8.2 | 0.4% | 2026-06-22 |
| CVE-2026-64792Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensionsregularlabs.com · Articles Anywhere extension for Joomla · CVSS 7.5 · 2026-07-22 | 7.5 | 0.4% | 2026-07-22 |
| CVE-2026-111464WP Fastest Cache <= 1.5.3 - Unauthenticated Sensitive Information Exposure via Cached wp-activate.php Responseemrevona · WP Fastest Cache – WordPress Cache Plugin · CVSS 5.9 · 2026-11-03 | 5.9 | 0.4% | 2026-11-03 |
| CVE-2026-65755Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extensionregularlabs.com · Articles Anywhere extension for Joomla · CVSS 7.5 · 2026-07-23 | 7.5 | 0.4% | 2026-07-23 |
| CVE-2026-15743Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheableNo vendor recorded · CVSS 5.7 · 2026-08-20 | 5.7 | 0.4% | 2026-08-20 |
| CVE-2026-27205Flask session does not add `Vary: Cookie` header when accessed in some wayspallets · flask · CVSS 2.3 · 2026-02-21 | 2.3 | 0.4% | 2026-02-21 |
| CVE-2025-64762authkit-nextjs may let session cookies be cached in CDNsworkos · authkit-nextjs · CVSS 8 · 2025-11-21 | 8.0 | 0.4% | 2025-11-21 |
| CVE-2026-9678undici vulnerable to cross-user information disclosure via shared cache whitespace bypassundici · undici · CVSS 5.9 · 2026-06-17 | 5.9 | 0.4% | 2026-06-17 |
| CVE-2026-64648Next.js: Response Body Cache Confusion for Requests Containing Bodiesvercel · next.js · CVSS 6 · 2026-07-27 | 6.0 | 0.4% | 2026-07-27 |
| CVE-2026-59213Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)open-webui · open-webui · CVSS 3.5 · 2026-07-09 | 3.5 | 0.4% | 2026-07-09 |
| CVE-2026-35193Potential exposure of private data via missing Vary: Authorization in UpdateCacheMiddlewaredjangoproject · Django · CVSS 3.1 · 2026-06-03 | 3.1 | 0.4% | 2026-06-03 |
| CVE-2026-92545The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache key which may allow a response cached for…Kong Inc. · Kong Gateway Enterprise · CVSS 8.7 · 2026-11-10 | 8.7 | 0.4% | 2026-11-10 |
| CVE-2024-12314Rapid Cache <= 1.2.3 - Unauthenticated Cache Poisoningmegaoptim · Rapid Cache · CVSS 7.2 · 2025-02-18 | 7.2 | 0.4% | 2025-02-18 |
| CVE-2026-6907Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddlewaredjangoproject · Django · CVSS 4.3 · 2026-05-05 | 4.3 | 0.4% | 2026-05-05 |
| CVE-2024-49580In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosureJetBrains · Ktor · CVSS 5.3 · 2024-10-17 | 5.3 | 0.4% | 2024-10-17 |
| CVE-2025-57752Next.js Affected by Cache Key Confusion for Image Optimization API Routesvercel · next.js · CVSS 6.2 · 2025-08-29 | 6.2 | 0.3% | 2025-08-29 |
| CVE-2026-94386Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token CacheApache Software Foundation · Apache Camel · CVSS 4.8 · 2026-10-26 | 4.8 | 0.3% | 2026-10-26 |
| CVE-2026-41841Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFluxSpring · Spring Framework · CVSS 5.9 · 2026-06-09 | 5.9 | 0.3% | 2026-06-09 |
| CVE-2025-14806IBM Planning Analytics Information DisclosureIBM · Planning Analytics Local · CVSS 5.7 · 2026-03-17 | 5.7 | 0.3% | 2026-03-17 |
| CVE-2026-59903Netty: Cache Poisoning and Information Disclosure via CORS Vary Header Overwritenetty · netty · CVSS 6.5 · 2026-08-17 | 6.5 | 0.3% | 2026-08-17 |
| CVE-2025-69202axios-cache-interceptor Vulnerable to Cache Poisoning via Ignored HTTP Vary Headerarthurfiorette · axios-cache-interceptor · CVSS 6 · 2025-12-29 | 6.0 | 0.3% | 2025-12-29 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.