Email address can be matched to an account

PKSA-w5qn-v455-qw2x CVE-2016-3170

Affected package: drupal/core

Affected version: >=8.0,<8.0.4

Reported by:
FriendsOfPHP/security-advisories