CVE-2026-123041
2026-11-10
22h18 +00:00
22h18 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client from its cache key, allowing a cached callout response for a caller to be served to another.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Use of Cache Containing Sensitive Information The code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere. |
