CVE-2026-108088

Published: Ott 20, 2026 Last Modified: Ott 20, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using the cache on a multi-user application, cached values for one user could be used when serving content for other users.

This issue affects Apache Cocoon: all versions.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

524

Use of Cache Containing Sensitive Information

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality
Potential Impacts:
Read Application Data
Applicable Platforms
All platforms may be affected
View CWE Details
http://www.openwall.com/lists/oss-security/2026/10/20/4
http://www.openwall.com/lists/oss-security/2026/10/20/4
https://lists.apache.org/thread/30vg3mht5vsm9vsmrdnx80zp5fw…
https://lists.apache.org/thread/30vg3mht5vsm9vsmrdnx80zp5fw536st