SUSE CVE-2023-6152

A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verifyemailenabled" will only validate email only on sign up...

CVE-2023-6152

creationtimestamp| type| source ---|---|--- 2024-02-13 21:41:51+00:00| published-proof-of-concept| https://github.com/grafana/bugbounty/security/advisories/GHSA-3hv4-r2fm-h27f 2024-02-13 23:21:45+00:00| seen| https://t.me/ctinow/184302 2024-04-12 10:15:26+00:00| seen| https://t.me/arpsyndicate/45...