CVE-2026-92442
2026-11-10
22h21 +00:00
22h21 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller to be served to another.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Use of Cache Containing Sensitive Information The code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere. |
