5Ht2

**Name of the Vulnerable Software and Affected Versions** effectindex/tripreporter versions prior to commit bd80ba833b9023d39ca22e29874296c8729dd53b **Description** The issue concerns an improper password verification vulnerability. This vulnerability allows any user with a password matching the password requirements to log in as any user, potentially leading to access to accounts and data loss of the user. **Recommendations** For versions prior to commit bd80ba833b9023d39ca22e29874296c8729dd53b, update to this commit or newer as soon as possible. As a temporary workaround, someone running their own instance may apply the patch manually.