logo

Database

Authentication mechanism absence or evasion In silverstripe/framework

Description

ChangePasswordForm doesn't check Member::canLogIn()

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions