Lack of Password Confirmation
Severity:
Low
How to test:
A password confirmation should be generated and current password requested for atleast the following items:
Change password
Change primary email
Change 2FA
Delete Account
Add Account
Change membership etc.
Last updated