Threats tagged 'ghsa-w4vj-gm7w-293h'

Vulnerability-Lookup has an authentication weakness in its account activation and password-recovery mechanism. Stateless signed tokens containing only the user's login were used for activation and recovery links. These tokens remained valid for the entire configured validity period even after password changes, allowing replay attacks. Tokens were also not bound to specific purposes, enabling reuse across workflows. The vulnerability allows an attacker who obtains a valid token to repeatedly reset the password and take control of the account without needing the victim's password or an authenticated session.