X (Formerly Twitter): Broken authentication and invalidated email address leads to account takeover

Hi, team. I found a bug in twitter.com Description and POC: 1 Create a twitter account having email address "[email protected]". 2 Now Logout and ask for password reset link. Don't use the password reset link. 3 Login using the same password back and update your email address to "[email protected]" and verify...