{"endpoints":["GET  /healthz","POST /reset/request  {\"email\": \"...\"}","POST /reset/verify   {\"email\": \"...\", \"code\": \"NNNN\"}"],"hint":"A password reset is protected by a 4-digit code. Nothing stops you from trying them all.","service":"CAPIE api04-resource-consumption","vuln":"API4:2023 Unrestricted Resource Consumption"}