Unrated
Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via an email link.
CVE-2019-1020018
First seen on SecPulse
References
- patch github.com
- patch github.com