{"data":{"id":"magento2-39570","source":"github-pr","sourceRef":"magento/magento2#39570","title":"Removed email disclosure","pr":{"number":39570,"url":"https://github.com/magento/magento2/pull/39570","author":"Mohamed-Asar","mergedAt":"2025-05-20T18:19:52Z","mergeCommit":"8421140fd2f7a4f5e42e8be93a71a69ed537876a","headCommit":"ad555c6f3e5becf406bd260898faeee871ab01f5","baseRef":"2.4-develop","diffSha256":"22b32832d4f963dce065cbb3a6e807a7798999be61469cf59692b1fdcaf39d04"},"issues":[{"number":39574,"url":"https://github.com/magento/magento2/issues/39574","title":"[Issue] Removed email disclosure","labels":["Area: Account","Component: Customer","Issue: Confirmed","Priority: P3","Progress: done","Reported on 2.4.x","Reproduced on 2.4.x"],"kind":"pr-derived"}],"fixedIn":"2.4.9","containingTags":["2.4.9"],"reportedOn":null,"codeMatch":{"2.4.6":"clean","2.4.6-p1":"clean","2.4.6-p2":"clean","2.4.6-p3":"clean","2.4.6-p4":"clean","2.4.6-p5":"clean","2.4.6-p6":"clean","2.4.6-p7":"clean","2.4.6-p8":"clean","2.4.6-p9":"clean","2.4.6-p10":"clean","2.4.6-p11":"clean","2.4.6-p12":"clean","2.4.6-p13":"clean","2.4.6-p14":"clean","2.4.6-p15":"clean","2.4.7":"clean","2.4.7-p1":"clean","2.4.7-p2":"clean","2.4.7-p3":"clean","2.4.7-p4":"clean","2.4.7-p5":"clean","2.4.7-p6":"clean","2.4.7-p7":"clean","2.4.7-p8":"clean","2.4.7-p9":"clean","2.4.7-p10":"clean","2.4.8":"clean","2.4.8-p1":"clean","2.4.8-p2":"clean","2.4.8-p3":"clean","2.4.8-p4":"clean","2.4.8-p5":"clean","2.4.9":"conflict"},"affectedVersions":["2.4.6","2.4.6-p1","2.4.6-p2","2.4.6-p3","2.4.6-p4","2.4.6-p5","2.4.6-p6","2.4.6-p7","2.4.6-p8","2.4.6-p9","2.4.6-p10","2.4.6-p11","2.4.6-p12","2.4.6-p13","2.4.6-p14","2.4.6-p15","2.4.7","2.4.7-p1","2.4.7-p2","2.4.7-p3","2.4.7-p4","2.4.7-p5","2.4.7-p6","2.4.7-p7","2.4.7-p8","2.4.7-p9","2.4.7-p10","2.4.8","2.4.8-p1","2.4.8-p2","2.4.8-p3","2.4.8-p4","2.4.8-p5"],"components":["magento/module-customer"],"files":[{"path":"app/code/Magento/Customer/Controller/Account/Confirmation.php","change":"modified","package":"magento/module-customer"}],"stripped":{"tests":["dev/tests/integration/testsuite/Magento/Customer/Controller/AccountTest.php"],"docs":[],"outsideCode":[]},"linesChanged":9,"mergeBatched":false,"excluded":null,"sections":{"description":"Display an error message indicating an incorrect email if the entered email is not required to confirm the account, regardless of whether the customer exists or not.","stepsToReproduce":null,"expectedResult":null,"actualResult":null,"source":"pr"},"signatures":[],"labels":{"area":["Account"],"component":["Customer"],"priority":"P3","severity":null,"reportedOn":["2.4.x"]},"categories":["Customer"],"triage":{"model":"@cf/cloudflare/clef","requestHash":"e8ed49795208382747c3c7679e66832fbf0784afb250f47265970dd784be2b22","isBugfix":0.8546,"changeKind":{"choice":"bugfix","probabilities":{"bugfix":0.9047,"feature":0.0278,"refactor":0.0372,"tests_only":0.0135,"docs_only":0.009,"dependency":0.0078},"confidence":0.7851},"scope":{"score":0.4665,"probabilities":{"0":0.5867,"1":0.3602,"2":0.0531},"confidence":0.2151},"risk":{"score":0.4364,"probabilities":{"0":0.741,"1":0.0817,"2":0.1773},"confidence":0.3807},"area":{"choice":"customer","probabilities":{"catalog":0.0049,"checkout":0.0061,"customer":0.9544,"admin":0.0078,"graphql_api":0.0061,"framework":0.0068,"frontend":0.0087,"other":0.0052},"confidence":0.8984},"securityRelevant":0.8507,"reportedVersion":{"choice":"unspecified","probabilities":{"2.4.0":0.0045,"2.4.0-p1":0.0047,"2.4.1":0.005,"2.4.1-p1":0.0042,"2.4.2":0.0069,"2.4.2-p1":0.0064,"2.4.2-p2":0.008,"2.4.3":0.0097,"2.4.3-p1":0.01,"2.4.3-p2":0.0117,"2.4.3-p3":0.0079,"2.4.4":0.0163,"2.4.4-p1":0.0091,"2.4.4-p10":0.0075,"2.4.4-p11":0.0076,"2.4.4-p12":0.0064,"2.4.4-p13":0.0066,"2.4.4-p14":0.0079,"2.4.4-p15":0.0062,"2.4.4-p16":0.0086,"2.4.4-p17":0.0074,"2.4.4-p18":0.0058,"2.4.4-p2":0.0029,"2.4.4-p3":0.0032,"2.4.4-p4":0.0033,"2.4.4-p5":0.0041,"2.4.4-p6":0.0047,"2.4.4-p7":0.0038,"2.4.4-p8":0.0044,"2.4.4-p9":0.0043,"2.4.5":0.0155,"2.4.5-p1":0.0109,"2.4.5-p10":0.0079,"2.4.5-p11":0.0134,"2.4.5-p12":0.0105,"2.4.5-p13":0.0093,"2.4.5-p14":0.0112,"2.4.5-p15":0.0084,"2.4.5-p16":0.0089,"2.4.5-p17":0.0088,"2.4.5-p2":0.0038,"2.4.5-p3":0.0053,"2.4.5-p4":0.0054,"2.4.5-p5":0.0056,"2.4.5-p6":0.006,"2.4.5-p7":0.0079,"2.4.5-p8":0.0072,"2.4.5-p9":0.0065,"2.4.6":0.0302,"2.4.6-p1":0.015,"2.4.6-p10":0.0088,"2.4.6-p11":0.0113,"2.4.6-p12":0.0115,"2.4.6-p13":0.0117,"2.4.6-p14":0.0101,"2.4.6-p15":0.0077,"2.4.6-p2":0.005,"2.4.6-p3":0.0078,"2.4.6-p4":0.0111,"2.4.6-p5":0.0074,"2.4.6-p6":0.0085,"2.4.6-p7":0.0078,"2.4.6-p8":0.0063,"2.4.6-p9":0.0062,"2.4.7":0.0199,"2.4.7-p1":0.0131,"2.4.7-p10":0.0085,"2.4.7-p2":0.0088,"2.4.7-p3":0.013,"2.4.7-p4":0.0174,"2.4.7-p5":0.0135,"2.4.7-p6":0.0176,"2.4.7-p7":0.0179,"2.4.7-p8":0.0107,"2.4.7-p9":0.0075,"2.4.8":0.0221,"2.4.8-p1":0.0177,"2.4.8-p2":0.0184,"2.4.8-p3":0.0169,"2.4.8-p4":0.0146,"2.4.8-p5":0.0138,"2.4.9":0.0202,"unspecified":0.2104},"confidence":0.0424},"backportWorthy":{"score":1.3856,"probabilities":{"0":0.1463,"1":0.3219,"2":0.5318},"confidence":0.1118}},"curated":{"title":"Confirmation page is an email disclosure of whether the customer exists","description":"On customer/account/confirmation, an email that does not require confirmation got \"This email does not require confirmation.\" and an unknown email got \"Wrong email.\", an email disclosure. The Confirmation controller now shows the \"Wrong email.\" error message regardless of whether the customer exists or not.","categories":["Customer"],"author":"claude-code/opus-5.5","date":"2026-10-06","reviewedBy":null},"tests":{"2.4.8-p5":{"before":"fail","after":"pass","adapted":false,"runAt":"2026-10-06T09:29:25.791Z","releaseCommit":"870a22c63d9d9b68fa3297962e2d5d5841115814","suites":{"integration":{"before":"fail","after":"pass","runAt":"2026-10-06T09:29:25.791Z"}}},"2.4.7-p10":{"before":"fail","after":"pass","adapted":false,"runAt":"2026-10-06T09:49:24.398Z","releaseCommit":"72561bf80652f57cc642a03e2c9a51d74a285b14","suites":{"integration":{"before":"fail","after":"pass","runAt":"2026-10-06T09:49:24.398Z"}}}}},"_documentation":"https://magento.watch/api","_description":"Upstream fix magento2-39570 details"}