CVE-2021-25323: Weak Password Recovery Mechanism for Forgotten Password

The default setting of MISP 2.4.136 did not enable the requirements aka requirepasswordconfirmation to provide the previous password when changing a password...