CVE-2016-9450 in Drupal
요약 (영어)
The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context.
예약하다
2016. 11. 18.
공개
2016. 11. 25.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 93830 | Drupal User Password Reset 약한 인증 | 345 | 정의되지 않음 | 공식 수정 | CVE-2016-9450 |