vivo Internet Technology
Mar 8, 2023 · Information Security
Web Cache Poisoning and HTTP Request Smuggling: Principles, Attack Scenarios, and Defenses
The article explains how misconfigured caches and inconsistent front‑end/back‑end parsing enable web cache poisoning and HTTP request smuggling attacks, illustrates practical exploitation scenarios, and recommends disabling caching, unifying request‑boundary logic, and adopting HTTP/2 or strict configurations to defend against these high‑impact threats.
Cache PoisoningHTTP request smugglingRequest Smuggling
0 likes · 16 min read