TI-2026-46354 CVE-2026-64829 · GHSA-88rm-6cpc-9j4w
Question2Answer 1.8.8 Session Fixation via Forgot-Password Flow
Priority MEDIUM 42
Question2Answer through 1.8.8 contains a session invalidation vulnerability that allows attackers with a previously obtained remember-me cookie to retain authenticated access by exploiting the forgot-password reset flow'…