Remitly disclosed on HackerOne: [CRITICAL] 0-Click Account Takeover...

## Summary: A 0-click Account Takeover vulnerability was identified in the password reset functionality of the target website. This flaw allows an attacker to reset the victim's password without any interaction or consent from the victim, leading to a complete compromise of the victim's account. …