Skip to content

GitLab

lemonldap-ng
lemonldap-ng
Closed
Opened by Clément OUDOT@clement_oudotOwner
Report abuse New issue

[Security: low] register_token used for account creation can be used as a valid session identifier

References

Resume

Duplicate of #1743 (closed) but for 1.9 branch

Edited by Xavier Guimard