No Rate limit on change password leads to account takeover

Summary: I found when login and go to changing password, there is no rate limit on that function, which leads to takeover the account.

2-Go to change password on (https://old.reddit.com/prefs/update/#) & enter the wrong password in old password   and enter new password and confirm the password.


3-Intercept the request & send it to Burp Intruder .

4-Make word-list & and start Brute Forcing.