# Gotta cache 'em all: bending the rules of web cache exploitation

DevFeed: [Gotta cache 'em all: bending the rules of web cache exploitation](<https://devfeed.tech/articles/gotta-cache-em-all-bending-the-rules-of-web-cache-exploitation-7679.md>)

Original publisher: [Read original article](<https://portswigger.net/research/gotta-cache-em-all>)

Author: Martin Doyhenard

Published: 2024-08-08T22:27:46Z

Content type: article

Language: en

Sources: [PortSwigger Research](<https://devfeed.tech/sources/portswigger-research.md>)

Topics: [web applications](<https://devfeed.tech/topics/web-applications.md>)

Tags: [akamai](<https://devfeed.tech/tags/akamai.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [cache](<https://devfeed.tech/tags/cache.md>), [cdn](<https://devfeed.tech/tags/cdn.md>), [cloudflare](<https://devfeed.tech/tags/cloudflare.md>), [http](<https://devfeed.tech/tags/http.md>), [web](<https://devfeed.tech/tags/web.md>)

## AI overview

The paper examines URL-parsing discrepancies between application servers and CDN proxies that can enable web cache poisoning and cache deception.

## Source excerpt

Through the years, we have seen many attacks exploiting web caches to hijack sensitive information or store malicious payloads. However, as CDNs became more popular, new discrepancies between propriet