Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via an email link.
When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Discourse | Discourse | * | * |
Discourse | Discourse | 2.4.0 | 2.4.0 |
Discourse | Discourse | 2.4.0 | 2.4.0 |