Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-9450
5
MEDIUMCVSS v2
Published
November 25, 2016
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 8.0.0, = 8.2.0, = 8.1.0, = 8.1.6, = 8.1.8, = 8.0.4, = 8.0.5, = 8.1.2, = 8.1.5, = 8.1.10, = 8.1.9, = 8.2.2, = 8.0.2, = 8.1.1, = 8.0.6, = 8.1.3, = 8.1.4, = 8.2.1, = 8.0.1, = 8.0.3, = 8.1.7NVD
drupal
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app= 8.0.0, = 8.2.0, = 8.1.0, = 8.1.6, = 8.1.8, = 8.0.4, = 8.0.5, = 8.1.2, = 8.1.5, = 8.1.10, = 8.1.9, = 8.2.2, = 8.0.2, = 8.1.1, = 8.0.6, = 8.1.3, = 8.1.4, = 8.2.1, = 8.0.1, = 8.0.3, = 8.1.7NVD
NPM