Threats tagged 'ghsa-3962-28xr-cf4g'

Databasement versions prior to 1.10.9 have an authentication bypass vulnerability in the OAuthService::findOrCreateLocalUser() function. This flaw allows attackers to link OpenID Connect (OIDC) identities to local user accounts by email without verifying the email's authenticity. An attacker can exploit this by registering an identity provider account using a victim's unverified email address, enabling login as that user, including super-admin accounts, and maintain access even after password resets.