[HIGH] Craft CMS: Arbitrary user password reset leading to administrator account takeover

PKSA-s5dz-k87m-97ms GHSA-p8x7-9vfw-p7vc

Affected package: craftcms/cms

Affected version: >=5.0.0-RC1,<5.10.8

Reported by:
GitHub