PRMitM: Attackers Can Hide Password Resets Inside Account Registrations
bleepingcomputer.com