{"action":"created","issue":{"url":"https://api.github.com/repos/taigaio/taiga-front/issues/459","labels_url":"https://api.github.com/repos/taigaio/taiga-front/issues/459/labels{/name}","comments_url":"https://api.github.com/repos/taigaio/taiga-front/issues/459/comments","events_url":"https://api.github.com/repos/taigaio/taiga-front/issues/459/events","html_url":"https://github.com/taigaio/taiga-front/issues/459","id":73356737,"number":459,"title":"Email disclosure issue","user":{"login":"tasn","id":108670,"avatar_url":"https://avatars.githubusercontent.com/u/108670?v=3","gravatar_id":"","url":"https://api.github.com/users/tasn","html_url":"https://github.com/tasn","followers_url":"https://api.github.com/users/tasn/followers","following_url":"https://api.github.com/users/tasn/following{/other_user}","gists_url":"https://api.github.com/users/tasn/gists{/gist_id}","starred_url":"https://api.github.com/users/tasn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tasn/subscriptions","organizations_url":"https://api.github.com/users/tasn/orgs","repos_url":"https://api.github.com/users/tasn/repos","events_url":"https://api.github.com/users/tasn/events{/privacy}","received_events_url":"https://api.github.com/users/tasn/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-05-05T16:09:32Z","updated_at":"2015-05-05T18:21:13Z","closed_at":"2015-05-05T18:21:13Z","body":"Hey,\r\n\r\nIt's actually the backend that's disclosing this information, but here felt like the right place to report it. Please let me know if I'm wrong. Anyhow, when asking for a password reset, I can put my username or email. The issue is when I put my username. When the username is detected I get a message that goes something like: \"An email has been sent to youremail@address.com\". This means I can just find the email of anyone using taigo.\r\n"},"comment":{"url":"https://api.github.com/repos/taigaio/taiga-front/issues/comments/99165471","html_url":"https://github.com/taigaio/taiga-front/issues/459#issuecomment-99165471","issue_url":"https://api.github.com/repos/taigaio/taiga-front/issues/459","id":99165471,"user":{"login":"superalex","id":1579633,"avatar_url":"https://avatars.githubusercontent.com/u/1579633?v=3","gravatar_id":"","url":"https://api.github.com/users/superalex","html_url":"https://github.com/superalex","followers_url":"https://api.github.com/users/superalex/followers","following_url":"https://api.github.com/users/superalex/following{/other_user}","gists_url":"https://api.github.com/users/superalex/gists{/gist_id}","starred_url":"https://api.github.com/users/superalex/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/superalex/subscriptions","organizations_url":"https://api.github.com/users/superalex/orgs","repos_url":"https://api.github.com/users/superalex/repos","events_url":"https://api.github.com/users/superalex/events{/privacy}","received_events_url":"https://api.github.com/users/superalex/received_events","type":"User","site_admin":false},"created_at":"2015-05-05T18:21:13Z","updated_at":"2015-05-05T18:21:13Z","body":"The bug is yet solved in master and stable branches and deployed in our servers but I think it would be better to hide the details for protecting another not updated instances.\r\n\r\nThank you very much again for reporting this, if you find anything more let us know please :+1: "}}