Weblate · Report #244287
Password token validation in Weblate Bypass #2
Validstatus
7upvotes
21 Aug 2017disclosed
How it was found
Hi,
I also found the bypass to #229987 and #243842.
Reproduction Steps:
- Add multiple emails to an account
- Request password reset for all emails
- Use the link in each to make the change
- All link works!
Shuaib