Full account takeover of any user through reset password https://hackerone.com/reports/1175081 Severity: Critical Reported To: UPchieve Reported By: #saajanbhujel State: Duplicate Disclosed: May 14, 2021, 9:28pm (UTC) 116 views21:30