pentester.land· Sep 29, 2022· by Francesco Mariani (@_medusa_1_), Jacopo Tediosi (@jacopotediosi)💰 Bounty: 50,000

Worldwide Server-side Cache Poisoning on All Akamai Edge Nodes ($50K+ Bounty Earned)

Open Original Article ↗
Target Program: Akamai, Paypal, Airbnb, Tesla, Valve, Zomato, Whitejar, Starbucks, PlayStation, Marriott, Hyatt Hotels, Goldman Sachs, Microsoft, Apple, LastPass, Brussels Airlines, Mastercard, eToro BBP, BMW Group, Rockstar Games
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Web cache poisoning