Weak password recovery is when an application allows an attacker to reset the password of another user without their consent. The highest severity impact of a weak password recovery flow would be full account compromise of all user accounts.Ho