Mattermost fails to invalidate previously generated password reset tokens when a new reset token was created.
2023-07-17T16:15:10.933
2024-11-21T08:17:37.270
Modified
CVSSv3.1: 4.8 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | mattermost | mattermost_server | < 7.8.7 | Yes |
| Application | mattermost | mattermost_server | < 7.9.5 | Yes |
| Application | mattermost | mattermost_server | < 7.10.3 | Yes |