tooljet < 1.26.1 - Account Takeover via Password Hash and Reset Token Exposure
Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Account Takeover :: when see the info i can see the forgot_password_token the hacker can send the request and changed the pass