This morning Natalie Podrazik, Manager @ Movable Type Support announced movable type v4.24 on the movable type professional list (pronet).
This release was launched mainly to address a security issue that relates to the exposure of user profile data. This bug impacts the Community Pack code directly.
Together with this security issue fix, the new movable type version contains an improved Password Recovery mechanism. Now only an email address is required for MT to trigger the recovery email, making the Password Hint obsolete.
I've just upgraded our two movable type demo installations so that you could enjoy the new release.
Do you need assistance to have your movable type installation upgraded? Get in touch!