This web application is using a caching system. By sending a request with a Host header that contains an invalid port it was possible to force the caching system to cache a response that contains a redirect to the invalid port. This cached response can be later served to victims resulting in denial of service.


Caching keys should also include the Host header port to prevent this type of issues.


Related Vulnerabilities