Google Patches Serious Account Recovery Vulnerabilities
Google Fixes Flaws That Could Have Allowed Hackers to Hijack User Accounts
A researcher got $12,500 from Google for reporting several vulnerabilities in the account recovery process that could have been exploited to change a user’s password.
Read more: Google Patches Serious Account Recovery Vulnerabilities
Story added 14. April 2016, content source with full text you can find at link above.