An email address enumeration vulnerability exists in the password reset function of Rocket.Chat through 3.7.1.
