Executive Summary

This vulnerability involves the openml/openml.org web application using predictable MD5-based tokens for important user actions like signup confirmation, password resets, and email change confirmations. The tokens are generated by hashing the current timestamp without any user-specific data or randomness, making them predictable. Attackers can brute-force these tokens within a small time window to perform unauthorized actions such as confirming accounts, resetting passwords, or approving email changes.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to unauthorized account confirmation, password resets, and email change approvals by attackers who brute-force the predictable tokens. This can result in account takeover, compromising user accounts and potentially leading to loss of access or control over affected accounts.

Useful 0 Not Useful 0