CVE-2017-5537

CVE-2017-5537 describes an information disclosure vulnerability in Weblate versions prior to 2.10.1. This flaw allows remote attackers to enumerate valid user accounts by observing differing error messages from the password reset form based on whether an email address is registered. Rated as Medium severity (CVSS 5.3), it has a low attack complexity and no user interaction required, with the primary impact being a limited compromise of confidentiality (user enumeration). There is no evidence of active exploitation, no public exploit code available (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage surrounding this CVE.