edx-platform before 2016-06-10 allows account activation with a spoofed e-mail address.

Published Jul 29, 2019 · Updated Aug 6, 2024 · Assigned by mitre