{"action":"created","issue":{"url":"https://api.github.com/repos/ltb-project/self-service-password/issues/24","repository_url":"https://api.github.com/repos/ltb-project/self-service-password","labels_url":"https://api.github.com/repos/ltb-project/self-service-password/issues/24/labels{/name}","comments_url":"https://api.github.com/repos/ltb-project/self-service-password/issues/24/comments","events_url":"https://api.github.com/repos/ltb-project/self-service-password/issues/24/events","html_url":"https://github.com/ltb-project/self-service-password/issues/24","id":179214693,"number":24,"title":"Reset by SMS token can be used to change another account password","user":{"login":"coudot","id":883396,"avatar_url":"https://avatars.githubusercontent.com/u/883396?v=3","gravatar_id":"","url":"https://api.github.com/users/coudot","html_url":"https://github.com/coudot","followers_url":"https://api.github.com/users/coudot/followers","following_url":"https://api.github.com/users/coudot/following{/other_user}","gists_url":"https://api.github.com/users/coudot/gists{/gist_id}","starred_url":"https://api.github.com/users/coudot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/coudot/subscriptions","organizations_url":"https://api.github.com/users/coudot/orgs","repos_url":"https://api.github.com/users/coudot/repos","events_url":"https://api.github.com/users/coudot/events{/privacy}","received_events_url":"https://api.github.com/users/coudot/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/ltb-project/self-service-password/labels/bug","name":"bug","color":"ee0701"}],"state":"closed","locked":false,"assignee":{"login":"coudot","id":883396,"avatar_url":"https://avatars.githubusercontent.com/u/883396?v=3","gravatar_id":"","url":"https://api.github.com/users/coudot","html_url":"https://github.com/coudot","followers_url":"https://api.github.com/users/coudot/followers","following_url":"https://api.github.com/users/coudot/following{/other_user}","gists_url":"https://api.github.com/users/coudot/gists{/gist_id}","starred_url":"https://api.github.com/users/coudot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/coudot/subscriptions","organizations_url":"https://api.github.com/users/coudot/orgs","repos_url":"https://api.github.com/users/coudot/repos","events_url":"https://api.github.com/users/coudot/events{/privacy}","received_events_url":"https://api.github.com/users/coudot/received_events","type":"User","site_admin":false},"assignees":[{"login":"coudot","id":883396,"avatar_url":"https://avatars.githubusercontent.com/u/883396?v=3","gravatar_id":"","url":"https://api.github.com/users/coudot","html_url":"https://github.com/coudot","followers_url":"https://api.github.com/users/coudot/followers","following_url":"https://api.github.com/users/coudot/following{/other_user}","gists_url":"https://api.github.com/users/coudot/gists{/gist_id}","starred_url":"https://api.github.com/users/coudot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/coudot/subscriptions","organizations_url":"https://api.github.com/users/coudot/orgs","repos_url":"https://api.github.com/users/coudot/repos","events_url":"https://api.github.com/users/coudot/events{/privacy}","received_events_url":"https://api.github.com/users/coudot/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/ltb-project/self-service-password/milestones/1","html_url":"https://github.com/ltb-project/self-service-password/milestones/1.0","labels_url":"https://api.github.com/repos/ltb-project/self-service-password/milestones/1/labels","id":1951900,"number":1,"title":"1.0","description":null,"creator":{"login":"coudot","id":883396,"avatar_url":"https://avatars.githubusercontent.com/u/883396?v=3","gravatar_id":"","url":"https://api.github.com/users/coudot","html_url":"https://github.com/coudot","followers_url":"https://api.github.com/users/coudot/followers","following_url":"https://api.github.com/users/coudot/following{/other_user}","gists_url":"https://api.github.com/users/coudot/gists{/gist_id}","starred_url":"https://api.github.com/users/coudot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/coudot/subscriptions","organizations_url":"https://api.github.com/users/coudot/orgs","repos_url":"https://api.github.com/users/coudot/repos","events_url":"https://api.github.com/users/coudot/events{/privacy}","received_events_url":"https://api.github.com/users/coudot/received_events","type":"User","site_admin":false},"open_issues":0,"closed_issues":19,"state":"open","created_at":"2016-08-19T16:01:40Z","updated_at":"2016-09-26T13:28:41Z","due_on":null,"closed_at":null},"comments":1,"created_at":"2016-09-26T12:27:40Z","updated_at":"2016-09-26T13:28:41Z","closed_at":"2016-09-26T13:28:41Z","body":"When using SMS token feature, the hidden fields can be changed with the browser inspector, allowing to change the password of another user."},"comment":{"url":"https://api.github.com/repos/ltb-project/self-service-password/issues/comments/249569275","html_url":"https://github.com/ltb-project/self-service-password/issues/24#issuecomment-249569275","issue_url":"https://api.github.com/repos/ltb-project/self-service-password/issues/24","id":249569275,"user":{"login":"coudot","id":883396,"avatar_url":"https://avatars.githubusercontent.com/u/883396?v=3","gravatar_id":"","url":"https://api.github.com/users/coudot","html_url":"https://github.com/coudot","followers_url":"https://api.github.com/users/coudot/followers","following_url":"https://api.github.com/users/coudot/following{/other_user}","gists_url":"https://api.github.com/users/coudot/gists{/gist_id}","starred_url":"https://api.github.com/users/coudot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/coudot/subscriptions","organizations_url":"https://api.github.com/users/coudot/orgs","repos_url":"https://api.github.com/users/coudot/repos","events_url":"https://api.github.com/users/coudot/events{/privacy}","received_events_url":"https://api.github.com/users/coudot/received_events","type":"User","site_admin":false},"created_at":"2016-09-26T13:28:41Z","updated_at":"2016-09-26T13:28:41Z","body":"Now SMS number and login values are encrypted, so it will not be possible to change them anymore."}}
{"actor":{"display_login":"coudot"}}