Session Tokens and Password Changes: A Reauthentication Gap in Filebrowser Quantum
Analysis of a password change flow that accepts a valid session token without requiring current-password reauthentication.
TAG ARCHIVE
#defense-in-depth
1 posts across research, tutorials, and notes.