CVE-2026-92545
2026-11-10
22h21 +00:00
22h21 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache key which may allow a response cached for a hostname to be served for another.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Use of Cache Containing Sensitive Information The code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere. |
