Cache Poisoning

Drupal is vulnerable to cache poisoning attacks. The library does not specify cache context in the password rest form, allowing a malicious user to load unwanted content on the page...