CVE-2016-9450 in Drupal
Resumen (Inglés)
The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context.
Reservar
2016-11-18
Divulgación
2016-11-25
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 93830 | Drupal User Password Reset autenticación débil | 345 | No está definido | Arreglo oficial | CVE-2016-9450 |