PT-2024-35957

Name of the Vulnerable Software and Affected Versions lunary-ai/lunary version 1.2.2 Description A security issue exists in lunary-ai/lunary version 1.2.2 that allows account hijacking. A user with a 'viewer' role can obtain a password reset token by sending a specific request to the server. The...