Password reset poisoning to ATO and OTP bypass

HTTP Parameter Pollution - It’s Contaminated

Business Logic Errors - A Logic Destruction