Falhas do tipo CWE-524
72 resultadosArmazenamento de Informações Sensíveis em Cache
A aplicação armazena dados sensíveis (senhas, tokens, chaves, dados pessoais) em cache sem proteção adequada. Um atacante com acesso ao sistema de arquivos, memória ou cache compartilhado consegue recuperar essas informações, comprometendo contas e dados.
Exemplo
Um navegador cachea credenciais de login em texto plano no disco, ou uma API armazena tokens JWT no Redis compartilhado sem criptografia. Qualquer processo ou usuário com acesso ao cache extrai os dados sensíveis.
Como mitigar
Nunca cachear dados sensíveis, ou cacheá-los criptografados com chaves gerenciadas de forma segura. Use marcadores HTTP (Cache-Control: no-store, no-cache) e configure TTL agressivo. Limpe o cache ao fazer logout ou destruir sessões.
CVE-2026-25540MEDIUMMastodon's signature-dependent ActivityPub collection responses cached under signature-independent keys (Web Cache Poisoning via `Rails.cache`)EPSS 0.4%CVE-2026-93748HIGHhttp-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-staleEPSS 0.4%CVE-2026-89186MEDIUMmpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared cachesEPSS 0.4%CVE-2026-9678MEDIUMundici vulnerable to cross-user information disclosure via shared cache whitespace bypassEPSS 0.4%CVE-2026-35193LOWPotential exposure of private data via missing Vary: Authorization in UpdateCacheMiddlewareEPSS 0.4%CVE-2025-64762HIGHauthkit-nextjs may let session cookies be cached in CDNsEPSS 0.4%CVE-2026-82755MEDIUMash_authentication_oauth2_server serves tenant-specific OAuth metadata as publicly cacheable without Vary, enabling cross-tenant confusionEPSS 0.4%CVE-2024-12314HIGHRapid Cache <= 1.2.3 - Unauthenticated Cache PoisoningEPSS 0.4%CVE-2026-6907LOWPotential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddlewareEPSS 0.4%CVE-2026-27205LOWFlask session does not add `Vary: Cookie` header when accessed in some waysEPSS 0.4%CVE-2024-49580MEDIUMIn JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosureEPSS 0.4%CVE-2025-57752MEDIUMNext.js Affected by Cache Key Confusion for Image Optimization API RoutesEPSS 0.3%CVE-2026-41841MEDIUMSpring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFluxEPSS 0.3%CVE-2026-64648MEDIUMNext.js: Response Body Cache Confusion for Requests Containing BodiesEPSS 0.3%CVE-2026-15743MEDIUMCatalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheableEPSS 0.3%CVE-2026-40012MEDIUMInformation about ECS zero scoped answers might leak to clients that use a specific ECSEPSS 0.3%CVE-2026-49858MEDIUMAPI Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gateEPSS 0.3%CVE-2025-69202MEDIUMaxios-cache-interceptor Vulnerable to Cache Poisoning via Ignored HTTP Vary HeaderEPSS 0.3%CVE-2026-14643MEDIUMundici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directivesEPSS 0.3%CVE-2026-71316HIGHNuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clientsEPSS 0.3%