Missing DMARC on weblate.org

How it was found

Summary

Email spoofing is possible due to missing SPF/Dmarc Records. Similar to this report submitted to Hackerone itself: https://hackerone.com/reports/575

Steps to reproduce:

1- Go to https://emkei.cz ( A Fake Mailer ) 2- Set the from to parameter as [email protected] or any other name, and send it. 3- The email is sent with any content you'd like to add as the message.

Thanks.