NetSight
medium5.3

CVE-2022-45292

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an account has been deleted.

Impact

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an account has been deleted.

Affected products

VendorProductAffected versions
FunkwhaleFunkwhale
Version 1.2.8

Weakness classification

References