[MEDIUM] Email address can be matched to an account

PKSA-w5qn-v455-qw2x CVE-2016-3170 GHSA-pqv4-xgqh-j8vh

Affected package: drupal/core

Affected version: >=8.0,<8.0.4

Reported by:
FriendsOfPHP/security-advisories, GitHub