Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[BUG] password reset: mail server error discloses user email #887

Open
thielj opened this issue Mar 29, 2024 · 0 comments
Open

[BUG] password reset: mail server error discloses user email #887

thielj opened this issue Mar 29, 2024 · 0 comments
Labels
backend Issues that require a backend change bug Something isn't working good first issue Good for newcomers rust Pull requests that update Rust code

Comments

@thielj
Copy link

thielj commented Mar 29, 2024 •
edited

Describe the bug
An error while sending the password reset email discloses the email address associated with a user name.

Screenshot 2024-03-29 123448

To Reproduce
Setup the mail server to reject the email and start the password reset sequence.

Expected behavior
Sensitive user data should not be exposed.

Additional context
v0.5.0 docker image (lldap/lldap:stable)
@thielj thielj added the bug Something isn't working label Mar 29, 2024
@nitnelave nitnelave added good first issue Good for newcomers backend Issues that require a backend change rust Pull requests that update Rust code labels Mar 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
backend Issues that require a backend change bug Something isn't working good first issue Good for newcomers rust Pull requests that update Rust code
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@nitnelave @thielj