High · Published
Cross-Session Session Leakage Through Cached Next.js Responses
How a shared CloudFront cache exposed an HttpOnly session credential embedded in server-rendered Next.js responses.
WRITE-UPS
Findings with
reproducible evidence.
Technical vulnerability write-ups published after coordinated disclosure.