How I Locked a User Out of Their Own Account — My First Bug Bounty Finding (opens in new tab)

So this is my first ever bug bounty writeup. And honestly, I didn’t expect my first real finding to be this interesting. It’s not an XSS…