[Tracker-discuss] [issue430] Email address revealed to unauthenticated user

[Weeble]

New submission from Weeble <clockworksaint at gmail.com>:

Click on "lost your login". Enter any username and submit. The following page reports the email address that is associated with that account.

I would not expect the email address to be revealed by this action.

----------
messages: 2314
nosy: weeble
priority: bug
status: unread
title: Email address revealed to unauthenticated user

_______________________________________________________
PSF Meta Tracker <metatracker at psf.upfronthosting.co.za>
<http://psf.upfronthosting.co.za/roundup/meta/issue430>
_______________________________________________________