https://www.securitynewspaper.com/2017/05/18/critical-improper-authentication-vulnerability-uber-allowed-password-reset-account/
A critical Improper Authentication vulnerability in Uber allowed password reset for any account