Web Hack List

Top 10 winner

1139 - cloudflare: Cloudflare Reverse Proxies are Dumping Uninitialized Memory

A flaw in Cloudflare's HTML-rewriting reverse proxy made it emit pages of uninitialized memory whenever a page behind it carried particular unbalanced tags. Because the proxies are shared between customers, the leaked bytes held other sites' encryption keys, cookies, passwords and POST bodies, and crawlers had already cached them.

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.