~ / search / GHSA-g6w5-439m-jhwv

GHSA-g6w5-439m-jhwv

Flarum mishandles invalidation of user email tokens

Source: GitHub Advisory Database (reviewed) High CVE-2019-11514

Packages

EcosystemPackageAffectedFixed in
Packagist flarum/flarum < 0.1.0-beta.8 0.1.0-beta.8

Details

As written in the advisory (Markdown source, shown as plain text).

`User/Command/ConfirmEmailHandler.php` in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens.

References

External links from the advisory. They lead to third-party sites.