Advisory Weakness Curation

Rack-Cache caches sensitive headers The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie and other sensitive headers, which allows attackers to obtain sensitive cookie information, hijack web sessions, or have other unspecified impact by accessing the cache.

rack-cache: caches sensitive headers The package rack-cache caches potentially sensitive response headers (such as `Set-Cookie`). Attackers with access to the cache could possibly obtain other user's cookies to e.g. bypass authentication.