Vendor
vulnerability-lookup
7 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.8
Reusable Account Activation and Recovery Tokens Allow Repeated Account Takeover in vulnerability-lookup
Vulnerability-Lookup contains an authentication weakness in its account activation and password-recovery mechanism. Activation and recovery links were generated using stateless signed tokens containing only the user's login. Although the token signature and a…