CVE-2019-11514

User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens

published April 25, 2019

CVSS
—
EPSS
1%
Percentile
71.0
In the wild
Unconfirmed
What it is

User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01337 · 71.0th percentile
Published
2019-04-25T02:59Z
EPSS history
Timeline
  • 25 APR 02:59Z
    User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens
    cvelistv5