Program: CWE-352
Project: CVE-2021-3921
Buggy source:
{% extends "./v1/layout/guest" %}

{% block content %}

    {% if errors|length > 0 %}
        <div class="alert alert-danger">
            <strong>{{ 'flash_error'|_ }}</strong> {{ 'problems_with_input'|_ }}<br><br>
            <ul>
                {% for error in errors.all %}
                    <li>{{ error }}</li>
                {% endfor %}
            </ul>
        </div>
    {% endif %}

    <div class="register-box-body">
        <p class="login-box-msg">{{ 'reset_password'|_ }}</p>
        <form method="POST" action="{{ url('/password/reset') }}">
            <input type="hidden" name="_token" value="{{ csrf_token() }}">
            <input type="hidden" name="token" value="{{ token }}">

            <div class="form-group has-feedback">
                <input type="email" name="email" class="form-control" value="{{ old('email') }}" placeholder="{{ trans('form.email') }}"/>
            </div>

            <div class="form-group has-feedback">
                <input type="password" class="form-control" placeholder="{{ trans('form.password') }}" name="password"/>
            </div>

            <div class="form-group has-feedback">
                <input type="password" class="form-control" placeholder="{{ trans('form.password_confirmation') }}" name="password_confirmation"/>
            </div>


            <div class="row">
                <div class="col-xs-12">
                    <button type="submit" class="btn btn-primary pull-right btn-flat">{{ 'button_reset_password'|_ }}</button>
                </div>
            </div>

        </form>

        <a href="{{ URL.to('/login') }}">{{ 'want_to_login'|_ }}</a><br>
        {% if allowRegistration %}
            <a href="{{ route('register') }}" class="text-center">{{ 'register_new_account'|_ }}</a><br>
        {% endif %}
    </div>

{% endblock %}


Fixed version (ground truth):
{% extends "./v1/layout/guest" %}

{% block content %}

    {% if errors|length > 0 %}
        <div class="alert alert-danger">
            <strong>{{ 'flash_error'|_ }}</strong> {{ 'problems_with_input'|_ }}<br><br>
            <ul>
                {% for error in errors.all %}
                    <li>{{ error }}</li>
                {% endfor %}
            </ul>
        </div>
    {% endif %}

    <div class="register-box-body">
        <p class="login-box-msg">{{ 'reset_password'|_ }}</p>
        <form method="POST" action="{{ url('/password/reset') }}">
            <input type="hidden" name="_token" value="{{ csrf_token() }}">
            <input type="hidden" name="token" value="{{ token }}">

            <div class="form-group has-feedback">
                <input type="email" name="email" class="form-control" value="{{ old('email') }}" placeholder="{{ trans('form.email') }}"/>
            </div>

            <div class="form-group has-feedback">
                <input type="password" class="form-control" placeholder="{{ trans('form.password') }}" name="password"/>
            </div>

            <div class="form-group has-feedback">
                <input type="password" class="form-control" placeholder="{{ trans('form.password_confirmation') }}" name="password_confirmation"/>
            </div>


            <div class="row">
                <div class="col-xs-12">
                    <button type="submit" class="btn btn-primary pull-right btn-flat">{{ 'button_reset_password'|_ }}</button>
                </div>
            </div>

        </form>

        <a href="{{ route('login') }}">{{ 'want_to_login'|_ }}</a><br>
        {% if allowRegistration %}
            <a href="{{ route('register') }}" class="text-center">{{ 'register_new_account'|_ }}</a><br>
        {% endif %}
    </div>

{% endblock %}