CVE-2016-9450

The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context...

CVE-2016-9450: Insufficient Verification of Data Authenticity

The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context...

PT-2016-7761

Name of the Vulnerable Software and Affected Versions Drupal 8.x versions prior to 8.2.3 Description The issue concerns the user password reset form, which allows remote attackers to conduct cache poisoning attacks due to the failure to specify a correct cache context. Recommendations For version...