CVE-2019-1020018

Discourse before v2.4.0.beta2 lacks a confirmation screen when logging in via an email link.

Source: CVE-2019-1020018