Grafana -- Email verification is not required after email changeentered 2024-02-20
no CVE referenced
CVE details
CVE-2023-6152
A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verify_email_enabled" will only validate email only on sign up.
- Score
- 5.4 medium
- Published
- 2024-02-13
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.