Cleartrip Password Reset Review

You will be redirected to a recovery page asking for the email address associated with your Cleartrip account. Enter the email ID you used when you first signed up. Double-check for typos, then click the "Submit" or "Send Reset Link" button.

Cleartrip’s password reset function is vulnerable to primarily due to weak token entropy and missing rate limiting. While basic user enumeration is partially mitigated, the current implementation does not meet OWASP ASVS Level 2 standards for account recovery. cleartrip password reset

Sometimes you don’t need a full reset; you just want to update your password for security reasons. Here is how to change it while logged in: You will be redirected to a recovery page