Project

General

Profile

Actions
Copy link

Bug #94589

closed

Flawed link in password reset mail

Added by Eckart Schmidt almost 3 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Backend API
Target version:
next-patchlevel
Start date:
2021-07-19
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
10
PHP Version:
8.0
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

In the plain text part of the password reset mail, the password recovery link is wrongly htmlencoded ("…validate&t=…").

How to reproduce:
1. In the be login form, click the "Forgot your password?" link.
2. In the "Reset Your Password" box, enter your e-mail address.
3. Open the incoming e-mail in plain text mode.
4. Clicking the reset link causes the error message "The password reset link is invalid or has expired."

Actions
Copy link

Also available in: Atom PDF