The fact
The flaw lies in the Absolute Form Parsing module and allows bypassing access restrictions.
An attacker could modify cached content or access normally restricted resources by crafting specially formed HTTP requests.
Click the link to read an article on the topic: