Get Demo
LinkJoin through 882f196 mishandles token ownership in password reset.
The product implements an authentication technique, but it skips a step that weakens the technique.