Lucene search
Veracode Vulnerability DatabaseVERACODE:27623HistoryOct 20, 2020 - 1:24 a.m.
Lack Of E-Mail Verification
2020-10-2001:24:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.0005 Low
EPSS
Percentile
17.6%
sylius/sylius suffers from a lack of e-mail verification. A registered and verified user in a shop is able to change it to another e-mail, without the need to re-verify on the new e-mail address.
Related
cve
cve
CVE-2020-15245
2020-10-19 21:15:12
friendsofphp
friendsofphp
cvelist
cvelist
CVE-2020-15245 Email verification bypass in Sylius
2020-10-19 20:50:16
osv
osv
Ability to switch customer email address on account detail page and stay verified
2020-10-19 20:40:59
CVE-2020-15245
2020-10-19 21:15:12
prion
prion
Design/Logic Flaw
2020-10-19 21:15:00
nvd
nvd
CVE-2020-15245
2020-10-19 21:15:12
github
github