Skip to content
OpenAdvisories

Vendor

vulnerability-lookup

7 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Reusable Account Activation and Recovery Tokens Allow Repeated Account Takeover in vulnerability-lookup

    Vulnerability-Lookup contains an authentication weakness in its account activation and password-recovery mechanism. Activation and recovery links were generated using stateless signed tokens containing only the user's login. Although the token signature and a…