You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by "kiranchavala (via GitHub)" <gi...@apache.org> on 2026/02/04 10:30:00 UTC

[I] No validation done when user resets a password [cloudstack]

kiranchavala opened a new issue, #12580:
URL: https://github.com/apache/cloudstack/issues/12580

   ### The required feature described as a wish
   
   Steps to reproduce the issue 
   
   1.  Enable the global setting  "user.password.reset.enabled"
   
   2. Click on forgot password option from the UI 
   
   <img width="706" height="625" alt="Image" src="https://github.com/user-attachments/assets/3d0f9a15-872e-4a62-975a-ecd57aab6b98" />
   
   <img width="712" height="419" alt="Image" src="https://github.com/user-attachments/assets/3a74a23f-c3af-4123-a3f7-c3fe110ccf2a" />
   
   <img width="1527" height="260" alt="Image" src="https://github.com/user-attachments/assets/e64a83a6-37fb-47af-a9e8-e4c5f78d0512" />
   
   <img width="1137" height="608" alt="Image" src="https://github.com/user-attachments/assets/394ecc1a-4d45-45b2-93bd-b5747677a00c" />
   
   
   3. User provides the same password, Cloudstack doesn't validate the password and sets the same password for the user 
   
   
   Expected behaviour 
   
   Cloudstack should validate if the same password is used for reset password, this can prevent security related issues 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] No validation done when user resets a password [cloudstack]

Posted by "Imvedansh (via GitHub)" <gi...@apache.org>.
Imvedansh commented on issue #12580:
URL: https://github.com/apache/cloudstack/issues/12580#issuecomment-3902197871

   @kiranchavala which SMTP server did you use to ?
   I tried with gmail ,modified the global settings for it but didnt no mail received.
   Then tried with Mailhog got the mail modified the link for localhost and it worked
   
   <img width="1826" height="922" alt="Image" src="https://github.com/user-attachments/assets/0436f1fa-2450-4422-a26b-7b3be6097095" />
   
   <img width="1826" height="543" alt="Image" src="https://github.com/user-attachments/assets/66f6aa95-a165-4779-82f2-f6dc88e0f1d2" />
   
   <img width="1126" height="373" alt="Image" src="https://github.com/user-attachments/assets/9fa5982c-5153-494c-b200-7fbc4ad136c7" />
   Im working on the solution now, just wondering did you tried it with gmail server did it threw the mail?
   4.22 CS


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] No validation done when user resets a password [cloudstack]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #12580:
URL: https://github.com/apache/cloudstack/issues/12580#issuecomment-4703961070

   This issue is stale because it has been open for 120 days with no activity. It may be removed by administrators of this project at any time. Remove the stale label or comment to request for removal of it to prevent this.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] No validation done when user resets a password [cloudstack]

Posted by "Imvedansh (via GitHub)" <gi...@apache.org>.
Imvedansh commented on issue #12580:
URL: https://github.com/apache/cloudstack/issues/12580#issuecomment-3872729005

   Interesting ,Will shoot the PR shortly


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org