CVE-2019-11514
Dashboard / Vulnerabilities / CVE-2019-11514
Summary:
Details: User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens.
References: https://discuss.flarum.org/d/17745-flarum-0-1-0-beta-8-released, https://github.com/flarum/core/commit/66607a56749339d50620b049701ad4d6a4dafbd7
Affected packages
Package
Name:
Purl:
Affected ranges
Type: GIT
Events:
Introduced- 268b041da2f0d9c5bf06284f46c5bd9fd047d97b
Fixed -None
Affected versions
0.1.0-beta
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
