high7.5
CVE-2019-11514
Flarum mishandles invalidation of user email tokens
Impact
`User/Command/ConfirmEmailHandler.php` in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | flarum/flarum | < 0.1.0-beta.8 | 0.1.0-beta.8 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flarum | Flarum | Version 0.1.0 |