CVE-2023-31287

creationtimestamp| type| source ---|---|--- 2025-01-31 22:16:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3680...

CVE-2023-31287

CVE-2023-31287 affects Serenity Serene and StartSharp (before 6.7.0). A password-reset link token is valid after use and can be replayed to reset a password, with the token expiring after 3 hours and sent as a query parameter. An attacker with browser-history access could reuse the token to take ...

CVE-2023-31287

An issue was discovered in Serenity Serene and StartSharp before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset the password. This token remains valid even after the password reset and can be used a second time to change the password of the...