CVE-2024-5386 | lunary-ai lunary up to 1.2.13 Password Reset Token recoveryToken excessive attack surface

A vulnerability identified as critical has been detected in lunary-ai lunary up to 1.2.13. The affected element is an unknown function of the component Password Reset Token Handler. This manipulation of the argument recoveryToken causes excessive attack surface.

This vulnerability appears as CVE-2024-5386. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.