CoenHolten / Mobilizon-for-Climate-Justice-for-ALL-living-beings

Climate justice for ALL living beings
https://joinmobilizon.org
GNU Affero General Public License v3.0
4 stars 0 forks source link

(Backend) Moderators and Administrators can access other users password reset tokens! #58

Open CoenHolten opened 5 months ago

CoenHolten commented 5 months ago

image

This allows reseting someone elses password and taking over their account. Related to https://github.com/CoenHolten/Mobilizon-for-Climate-Justice-for-ALL-living-beings/issues/57