CyberRota Analysis
AI-GeneratedA cache poisoning vulnerability in CoreBunch/Instatic versions prior to 0.0.14 allows unauthenticated remote attackers to manipulate the render cache by exploiting the 'u' query parameter in the GET request to the server island endpoint. This can lead to the injection of malicious content that affects all users accessing the compromised node, potentially compromising the integrity of the application. Organizations using affected versions should prioritize patching to mitigate the risk of content manipulation and ensure user safety.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remote attacker to poison the shared process-wide render cache by manipulating the u query parameter of the GET /_instatic/hole/<nodeId> server island endpoint.