CVE-2023-3591
Lack of previous password reset tokens on new token creation
Summary
Lack of previous password reset tokens on new token creation
Original description
The description as published by the source.
Mattermost fails to invalidate previously generated password reset tokens when a new reset token was created.
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com