Skip to content
OpenAdvisories

Package · NuGet

Serenity.Net.Core

4 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.8

    Insufficient token expiration in Serenity

    An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset the password. This token remains valid even after the password reset and can be used a second time …