CVE-2023-6152

Vulnerability Description

A user changing their email after signing up and verifying it can change it without verification in profile settings.

The configuration option "verify_email_enabled" will only validate email only on sign up.

Vulnerability Details

Published Date

February 13, 2024

Last Modified

February 15, 2025

Source

NVD

CVE-2023-6152

Vulnerability Description

Vulnerability Details

Discussion (0)

Add Comment