CVE-2023-3591 (published 2023-07-17T15:30:05.295Z)
Mattermost fails to invalidate previously generated password reset tokens when a new reset token was created.


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 0, 7.8.7, 7.9.5, 7.10.3