Incomplete or No Cache-control Header Set
The cache-control header has not been set properly or is missing, allowing the browser and proxies to cache content.
Summary
The cache-control header has not been set properly or is missing, allowing the browser and proxies to cache content.
Solution
Whenever possible ensure the cache-control HTTP header is set with no-cache, no-store, must-revalidate.
References
- https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html#web-content-caching
- https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control
Hackers target weaknesses. We expose them.
Our expert VAPT identifies vulnerabilities in your web apps & network before attackers exploit them. Invest in peace of mind.
