Netflix Open Connect: CDN Web Cache Poisoning via Unkeyed HTTP Headers
Sponsored Enterprise Content
Netflix Forensic Study is Locked
The first 3 full-loop interviews and first 5 forensic case studies are 100% free. To access this premium hiring gauntlet and its verified reference architecture, simply watch a brief 5-second sponsor message.
Permanent device-side unlock synced with your local workspace. No subscription or sign-up required.
Public Syllabus OverviewEdge & CDN Security · undefined
Netflix Open Connect: CDN Web Cache Poisoning via Unkeyed HTTP Headers: Security researchers discovered an unkeyed HTTP header injection flaw in Netflix's Open Connect CDN edge cache. By injecting a malicious `X-Forwarded-Host: evil-phishing.com` header on a static video metadata endpoint, the CDN cached the attacker's JavaScript payload and served it to 4 million smart TV viewers.