Discourse Meta
Password reset confirm message should discourage social engineering
Feature
JammyDodger
Closed
August 4, 2023, 8:03am
11
Closed in favour of
Email enumeration vulnerability on "Password Reset" dialogue
show post in topic
Related topics
Topic
Replies
Views
Activity
Received password reset email though I didn’t request one?
Support
15
4058
November 28, 2023
Password reset email leads to "Oops! That page doesn’t exist or is private."
Support
3
638
September 30, 2021
Hiding "e-mail taken" on sign-up by default
Announcements
6
100
December 22, 2024
Is it possible to hash the email database?
Feature
23
1184
October 10, 2018
Do not leak emails on password reset
Support
4
605
January 14, 2021