Security Patch: Account Activation with Unverified Email

[Adam Palay]

During an automated security audit of the edX platform code, we discovered a bug in the email verification and account activation process.  This bug allows a malicious user to activate an account with an unverified (invalid or someone else’s) email address.

Read the full security announcement here: https://open.edx.org/announcements/security-alert-account-activation-unverified-email

Thanks,

Adam