Missing rate limiting on password reset functionality allows to send lot of emails

Nextcloud disclosed a bug submitted by primebeast: https://hackerone.com/reports/1691195 – Bounty: $100