CVE-2017-5537

CVE-2017-5537 affects Weblate prior to 2.10.1, where the password reset form returns different error messages based on whether the provided email is linked to an account. This behavior enables remote user enumeration via multiple requests. Public reports across multiple sources (SÚSE, OSV, GHSA a...