Nginx resolver vulnerabilities allow cache poisoning attack

So basically turning on Nginx resolver means people can send your traffic to wherever they want? With this poisoning attack?