PT-2021-23089

Name of the Vulnerable Software and Affected Versions Wire-server versions prior to 2021-08-16 Description The issue allows an attacker to trigger an email address change of a user with only the short-lived session token in the Authorization header, constituting a privilege escalation attack. Thi...