LinkJoin Token Ownership Vulnerability in Password Reset Process

A vulnerability has been identified in LinkJoin, prior to commit 882f196, related to improper handling of token ownership during the password reset process. This flaw could potentially be exploited to manipulate token verification, leading to unauthorized password resets.

Impact

Exploitation of this vulnerability could allow for unauthorized password resets, potentially leading to account takeovers.

Remediation

Users can update to the latest version of LinkJoin, which includes a fix for this vulnerability by verifying token ownership before allowing password resets.