Monthly
The Drupal contrib module Key auth (versions 0.0.0 through 2.2.4) can store sensitive authentication data in the web browser cache because of missing or incorrect cache-control handling, a CWE-525 weakness that also reflects incorrectly configured access-control levels in the module. Low-privilege authenticated users (CVSS PR:L) could recover that cached material over the network, yielding limited confidentiality and integrity impact for a base score of 5.4. Patch data shows a vendor fix is available, EPSS is only 0.15% (4th percentile) and there is no KEV listing; no public exploit identified at time of analysis, and the priority label is this_month rather than immediate action.
Drupal's Webform contributed module can retain sensitive submitted form data in the browser cache, leaving it recoverable by a later user of the same browser profile on versions prior to 6.2.12 and 6.3.1. Exploitation requires a low-privileged authenticated user (PR:L) to reach Webform-rendered content whose access-control and cache-control settings are misconfigured, and the assessed vector rates attack complexity as high with only limited confidentiality impact (CVSS 3.1 base score 3.1). There is no CISA KEV listing and no public exploit identified at time of analysis; EPSS is 0.19% (8th percentile) and the vuln.today priority is monitor, consistent with a low-severity, low-urgency disclosure.
IBM Concert versions 1.0 through 3.0.0 persist web page content to a local on-disk cache that is not adequately protected, so a second user with an account on the same host can read cached page data belonging to another Concert user. The issue is strictly local (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, base score 4.0) and impacts confidentiality only - there is no network attack path, no integrity or availability effect, and single-user or isolated deployments where no other principal can reach the cache are not meaningfully exposed. Exploitation requires an attacker to already hold local/interactive access to the host; no public exploit code has been identified at time of analysis and the issue is not in CISA KEV. A vendor patch is available.
Sensitive configuration data exposure in Siemens RUGGEDCOM RST2428P industrial network switch (all firmware versions before V4.0) allows authenticated attackers to retrieve confidential information from the browser cache. The web management interface fails to enforce proper cache-control directives when an authenticated user performs specific configuration modification workflows, persisting sensitive data in the local browser cache. No public exploit code exists and the vulnerability is not listed in CISA KEV, though the High confidentiality impact (VC:H) on the vulnerable component elevates concern for OT/industrial network environments where configuration data can expose network topology or credentials.
Cache poisoning in @astrojs/node versions 9.4.4 and earlier allows unauthenticated remote attackers to poison CDN caches by sending malformed if-match headers to static asset endpoints, causing the server to return 500 errors with immutable one-year cache directives instead of the correct 412 Precondition Failed response. This vulnerability affects all subsequent requests to poisoned assets until the cache expires, breaking application functionality for legitimate users. The vulnerability is not actively exploited in the wild, but proof-of-concept exploitation is straightforward and requires only a single crafted HTTP request.
LAPSWebUI before version 2.4 by Truesec improperly caches LAPS (Local Administrator Password Solution) passwords in browser storage, allowing a local attacker with user-level access to retrieve plaintext or weakly protected admin credentials from the browser cache. An attacker who gains access to a workstation where an administrator has used LAPSWebUI can escalate privileges to local administrator by exploiting this caching behavior. While the CVSS score is moderate at 6.0, the practical impact is high because successful exploitation directly enables privilege escalation to administrative access.
IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system. [CVSS 6.2 MEDIUM]
Tenda W30E V2 firmware through version 16.01.0.19(5037) fails to implement proper cache-control headers on sensitive administrative responses, allowing a local authenticated attacker to retrieve cached credentials from the browser's storage. This high-confidentiality impact vulnerability has no available patch and affects users on vulnerable firmware versions.
Aion versions up to 2.0 contains a vulnerability that allows attackers to unintended storage of sensitive or dynamic content, potentially resulting in una (CVSS 2.8).
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels.0.0 before 10.4.9, from 10.5.0. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
The Drupal contrib module Key auth (versions 0.0.0 through 2.2.4) can store sensitive authentication data in the web browser cache because of missing or incorrect cache-control handling, a CWE-525 weakness that also reflects incorrectly configured access-control levels in the module. Low-privilege authenticated users (CVSS PR:L) could recover that cached material over the network, yielding limited confidentiality and integrity impact for a base score of 5.4. Patch data shows a vendor fix is available, EPSS is only 0.15% (4th percentile) and there is no KEV listing; no public exploit identified at time of analysis, and the priority label is this_month rather than immediate action.
Drupal's Webform contributed module can retain sensitive submitted form data in the browser cache, leaving it recoverable by a later user of the same browser profile on versions prior to 6.2.12 and 6.3.1. Exploitation requires a low-privileged authenticated user (PR:L) to reach Webform-rendered content whose access-control and cache-control settings are misconfigured, and the assessed vector rates attack complexity as high with only limited confidentiality impact (CVSS 3.1 base score 3.1). There is no CISA KEV listing and no public exploit identified at time of analysis; EPSS is 0.19% (8th percentile) and the vuln.today priority is monitor, consistent with a low-severity, low-urgency disclosure.
IBM Concert versions 1.0 through 3.0.0 persist web page content to a local on-disk cache that is not adequately protected, so a second user with an account on the same host can read cached page data belonging to another Concert user. The issue is strictly local (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, base score 4.0) and impacts confidentiality only - there is no network attack path, no integrity or availability effect, and single-user or isolated deployments where no other principal can reach the cache are not meaningfully exposed. Exploitation requires an attacker to already hold local/interactive access to the host; no public exploit code has been identified at time of analysis and the issue is not in CISA KEV. A vendor patch is available.
Sensitive configuration data exposure in Siemens RUGGEDCOM RST2428P industrial network switch (all firmware versions before V4.0) allows authenticated attackers to retrieve confidential information from the browser cache. The web management interface fails to enforce proper cache-control directives when an authenticated user performs specific configuration modification workflows, persisting sensitive data in the local browser cache. No public exploit code exists and the vulnerability is not listed in CISA KEV, though the High confidentiality impact (VC:H) on the vulnerable component elevates concern for OT/industrial network environments where configuration data can expose network topology or credentials.
Cache poisoning in @astrojs/node versions 9.4.4 and earlier allows unauthenticated remote attackers to poison CDN caches by sending malformed if-match headers to static asset endpoints, causing the server to return 500 errors with immutable one-year cache directives instead of the correct 412 Precondition Failed response. This vulnerability affects all subsequent requests to poisoned assets until the cache expires, breaking application functionality for legitimate users. The vulnerability is not actively exploited in the wild, but proof-of-concept exploitation is straightforward and requires only a single crafted HTTP request.
LAPSWebUI before version 2.4 by Truesec improperly caches LAPS (Local Administrator Password Solution) passwords in browser storage, allowing a local attacker with user-level access to retrieve plaintext or weakly protected admin credentials from the browser cache. An attacker who gains access to a workstation where an administrator has used LAPSWebUI can escalate privileges to local administrator by exploiting this caching behavior. While the CVSS score is moderate at 6.0, the practical impact is high because successful exploitation directly enables privilege escalation to administrative access.
IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system. [CVSS 6.2 MEDIUM]
Tenda W30E V2 firmware through version 16.01.0.19(5037) fails to implement proper cache-control headers on sensitive administrative responses, allowing a local authenticated attacker to retrieve cached credentials from the browser's storage. This high-confidentiality impact vulnerability has no available patch and affects users on vulnerable firmware versions.
Aion versions up to 2.0 contains a vulnerability that allows attackers to unintended storage of sensitive or dynamic content, potentially resulting in una (CVSS 2.8).
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels.0.0 before 10.4.9, from 10.5.0. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.