Fengwen

The issue allows remote attackers to obtain sensitive username information. This is possible by leveraging a configuration that permits using an email address to login and a module that permits logging in.