EverShop Password Reset Token Exposure Vulnerability Allowing Account Takeover

A vulnerability exists in EverShop, a TypeScript-first eCommerce platform, in versions prior to 2.1.1. The issue arises in the 'Forgot Password' feature, where the API response includes the password reset token for the specified email address. This token exposure enables an attacker to take over the associated account.

Impact

Exploitation of this vulnerability allows for arbitrary customer account takeover by exposing the password reset token in the API response, which can be used to reset the password and gain unauthorized access to the account.

Remediation

Users are advised to upgrade EverShop to version 2.1.1, which addresses this vulnerability.