Lucene search
+L

1 matches found

RubySec
RubySec
added 2024/02/20 12:0 a.m.29 views

Possibility to circumvent the invitation token expiry period

Impact The invites feature allows users to accept the invitation for an unlimited amount of time through the password reset functionality. When using the password reset functionality, the deviseinvitable gem always accepts the pending invitation if the user has been invited as shown in this piece...

7.4CVSS7.5AI score0.00791EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder