When re-setting and changing the password, user is allowed to set the previous password as the new password. - Githubissues

the-deep / client

Web client for DEEP

https://app.thedeep.io/

GNU Affero General Public License v3.0

4 stars 2 forks source link

When re-setting and changing the password, user is allowed to set the previous password as the new password. #2884

Open Shhhhhubh opened 5 months ago

Shhhhhubh commented 5 months ago

Step To Replicate

Go to the login page
Click on Forget password
Open the email and click on the link for resetting the password
Enter the previous password as the new password

Expected Outcome

The user should not be able to enter the previous password as the new password

Actual Outcome

The user is able to add the previous password as the new password