CVE-2016-9450

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-9450
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9450.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-9450
Aliases
Published
2016-11-25T18:59:02.090Z
Modified
2026-03-10T14:14:27.547067Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context.

References

Affected packages

Git / github.com/drupal/drupal

Affected ranges

Type
GIT
Repo
https://github.com/drupal/drupal
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
35c2f3ca5c935f3d8bde15932a712677c9bbd50f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9b7ead2e45935bc1dadfe74490b8cbefa54f433a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
305b2f38da238705a10e543994808ce29dbdbbc0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
64de978a08663904ba8231f20d2f26c8f5a135e8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
70378b5c5dd7c99f56f7e3f36cffcd33d46644c6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
598ccc572506256a13c6b3eb978b348f0dee3c6b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
48786c6ee658f4ef4275962331d406ab186dd6f0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fc345ab700c4d00eb5d1f5000700bc534feb49c6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c3f5245f1c98a8a1cf119c977db05488e0a32074
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c24c1c7694c3970213e758a7198bc4e4a9c485f8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5249c53ef0c3a715bc46bb568c91470ed0374996
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
19b32a3ab40e8c89495ee260e46a5e8375ad3756
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
15ddad3bf498b0e8bdfe7724e1dbaf653c2d7885
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e15ebedc4c6afdab87c1ffd7cb1f5ca462aafe87
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5bf651dabf88766a588adf3c34a7ee2fa1ab4016
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
09dbe27efa2b6f255b804168711166bd3f8b6d4e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
079a52b45df32b8aa82d1eb0c57bd97d1e065f57
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b7390caeeec23886c4b8d91f8952c35c034cd41f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f1def1199d3e73144d8931b30ebef7d2d82526cb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4f05b98429b58c93fec1a8222956851f03a6c4ac
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
260d019e286d36f7d2b4fb5b3d62723a9ee81840
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2d64433829033660b87a1a1d054b3899a18addba
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
647bfab79e6ee1fddb339c50152315e479d4fe8f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3f7404935955cd2a63023e77a07c4231ad5ff62a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f25feddd5ca56e6155e26e52667ab4fef87bb19d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d918ae1ecc4e0fb86ae9296da1a39f02bd36cde4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
766daeb0449588db7207606c22bcf7b59d1f6f9b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f7e125ce37fbf52b9581c2f9fade7ff33267bb42
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
13692d3b92b2d4ddd93b0ddf0a4c4d97b37e68a8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5a19562de5b1a8a056bc33c467d806073c4ac085
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2b08ba7c1c7afb76c1e3d54e533ab631c5a0ba67
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c0d600fe2ce507f28e91acc51d7f63be28521536
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6204be67bb3c1a0b64991770c27b62dbadb15007
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a87557fde744444c0f7f5344d4f82b721a65717e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
32801642fc1bc9f4a9942ce90e9b3669e74d16b3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8bd13242c06ad307c72500b17c38cf325de424a0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b101f904648a70822b87427007b6228c3824e0ae
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5e60a2770329300866319aac1ab465159688d319
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
30115b418e854f4df5b94a1667d3ade55cfb9471
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1db8df63020cb020ed13a9793669f6e435f64334
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9b0cfa7415e91b80fb5a87760477b6f5783eb048
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fb83de52e58e8fb3303de7aa9834f99ae128564a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d53f5234293d7d1a3bc8083ad13d7c850c834583
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
121cf4e23ae2f475f785939ab504ed2a1d52dfd0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5899fe1f5b0f9c1f9feaa893f5ead14955d6231c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
407b39f9602321dd0e979006c929339ec34f0d6c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
40bc6813016bc7de89986998a75fa13d76ce3152
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6ffaabfece5d21e41c1ae53c8e3a8f6ffa94582a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ce4cc6593bb01ab2b7817ae54beed9632f6e850e
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-alpha14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-alpha15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-beta1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-beta10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-beta11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-beta12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-beta13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-beta14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-beta15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-beta16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-beta2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-beta3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-beta4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-beta6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-beta7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-beta9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0-rc4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.0-beta1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.0-beta2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.0-beta1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.0-beta2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.0-beta3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.0-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.2"
        }
    ]
}

Affected versions

1.*
1.0
2.*
2.0
3.*
3.0.1
5.*
5.0-beta-1
5.0-beta-2
5.0-rc-1
5.0-rc-2
6.*
6.0-beta-1
6.0-beta-2
6.0-beta-3
6.0-beta-4
6.0-rc-1
6.0-rc-2
6.0-rc-3
7.*
7.0
7.0-alpha1
7.0-alpha2
7.0-alpha3
7.0-alpha4
7.0-alpha5
7.0-alpha6
7.0-alpha7
7.0-beta1
7.0-beta2
7.0-beta3
7.0-rc-1
7.0-rc-2
7.0-rc-3
7.0-rc-4
7.0-unstable-1
7.0-unstable-10
7.0-unstable-2
7.0-unstable-3
7.0-unstable-4
7.0-unstable-5
7.0-unstable-6
7.0-unstable-7
8.*
8.0-alpha10
8.0-alpha11
8.0-alpha12
8.0-alpha13
8.0-alpha2
8.0-alpha3
8.0-alpha4
8.0-alpha5
8.0-alpha6
8.0-alpha7
8.0-alpha8
8.0-alpha9
8.0.0
8.0.0-alpha14
8.0.0-alpha15
8.0.0-beta1
8.0.0-beta10
8.0.0-beta11
8.0.0-beta12
8.0.0-beta13
8.0.0-beta14
8.0.0-beta15
8.0.0-beta16
8.0.0-beta2
8.0.0-beta3
8.0.0-beta4
8.0.0-beta5
8.0.0-beta6
8.0.0-beta7
8.0.0-beta9
8.0.0-rc1
8.0.0-rc2
8.0.0-rc3
8.0.0-rc4
Other
start

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9450.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0.0-alpha10"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0.0-alpha11"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0.0-alpha12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0.0-alpha13"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0.0-alpha2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0.0-alpha3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0.0-alpha4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0.0-alpha5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0.0-alpha6"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0.0-alpha7"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0.0-alpha8"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0.0-alpha9"
            }
        ]
    }
]