CVE-2023-3591
Lack of previous password reset tokens on new token creation
Résumé
Lack of previous password reset tokens on new token creation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to invalidate previously generated password reset tokens when a new reset token was created.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com