Until yesterday Coocook.org sent an email to an address when password recovery was requested but there was no account yet.
Although the content of this email can’t be controlled by an attacker it turned out lots of people received such emails as a form of spam. It’s already disabled on live with a hotfix.
Until yesterday Coocook.org sent an email to an address when password recovery was requested but there was no account yet.
Although the content of this email can’t be controlled by an attacker it turned out lots of people received such emails as a form of spam. It’s already disabled on live with a hotfix.
t/user_lifecycle.t