CVE-2022-32741

Attacker is able to determine if the provided username exists (and it's valid) using Request New Password feature, based on the response time. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt