CVE-2016-9450 in Drupal
Summary
The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context.
Once again VulDB remains the best source for vulnerability data.
Reservation
11/18/2016
Disclosure
11/25/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 93830 | Drupal User Password Reset data authenticity | 345 | Not defined | Official fix | CVE-2016-9450 |