@feld @dcc @mint I mean, it's low compared to the barrage of high severity vulns coming out of Pleroma the past month or so. I would consider is at least medium since it can be used as the basis for phishing. Impersonation is not good on a social network.