Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via a user-api OTP.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: dwf
Published: 2019-07-29T12:25:59
Updated: 2019-10-09T18:56:05
Reserved: 2019-07-26T00:00:00
Link: CVE-2019-1020017
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-07-29T13:15:12.263
Modified: 2023-03-03T17:30:50.453
Link: CVE-2019-1020017
JSON object: View
Redhat Information
No data.
CWE