New submission from Weeble <clockworksa...@gmail.com>:

Click on "lost your login". Enter any username and submit. The following page 
reports the email address that is associated with that account.

I would not expect the email address to be revealed by this action.

----------
messages: 2314
nosy: weeble
priority: bug
status: unread
title: Email address revealed to unauthenticated user

_______________________________________________________
PSF Meta Tracker <metatrac...@psf.upfronthosting.co.za>
<http://psf.upfronthosting.co.za/roundup/meta/issue430>
_______________________________________________________
_______________________________________________
Tracker-discuss mailing list
Tracker-discuss@python.org
http://mail.python.org/mailman/listinfo/tracker-discuss

Reply via email to