#02 "Password already in use by"

#02 "Password already in use by"

Summary: This is a quite interesting bug which allows an attacker to takeover full account.
Steps to reproduce: Create an account with a less common password(example: 123). It will say "Password already in use by". By this we will get to know the email and password and login to the account.
Impact: This vulnerability allows an attacker to steal password of many users and may lead to full account takeover