Improper Cache Key Handling

Victor Test

1 year ago

api-platform/core is vulnerable to Improper cache key handling. The vulnerability is due to the isCacheKeySafe() method not effectively preventing caching when followed by the parent::normalize call, which may allow an attacker to access unauthorized…Read More