Executive brief
Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer
Affected products
- Go github.com/answerdev/answer
Junglewise Threat Intelligence
CVE-2023-1976: GO-2023-1719 - Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer
CVE-2023-1976 · Severity: low · CVSS 3.1 · Published 2024-08-20
Technologies: github.com/answerdev/answer (Go). Vendors: Go.
Related threats
- GO-2023-2051 - Answer Missing Authentication for Critical Function in github.com/answerdev/answer
- GO-2023-2001 - Answer has Weak Password Requirements in github.com/answerdev/answer
- GO-2023-1997 - Answer Missing Authorization vulnerability in github.com/answerdev/answer
- GO-2023-1996 - Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer
- GO-2023-1995 - Answer has Race Condition within a Thread in github.com/answerdev/answer