Steps to replicate the issue (include links if applicable):
- Send a password reset email for an account using Special:ResetPassword
- Run CheckUser on the IP / account used to make the password reset
- Observe that the message says "reset password for user ..."
What happens?:
This incorrectly indicates that the user had their password reset
What should have happened instead?:
The message should instead be that a password reset email was sent for that user.
Software version (skip for WMF-hosted wikis like Wikipedia):
Checkuser on the master branch on enwiki.