Security News > 2015 > March > Drupal Flaw Allows Attackers to Forge Password Reset URLs (SecurityWeek)