1 matches found
Possibility to circumvent the invitation token expiry period
Impact The invites feature allows users to accept the invitation for an unlimited amount of time through the password reset functionality. When using the password reset functionality, the deviseinvitable gem always accepts the pending invitation if the user has been invited as shown in this piece...
7.4CVSS7.5AI score0.00791EPSS
SaveExploits0References1Affected Software1
20