1 matches found
Filament: Password validity disclosure for accounts denied panel access on login page
When multi-factor authentication is enabled, the login page presents the multi-factor challenge before evaluating canAccessPanel. For an account that canAccessPanel denies, submitting the correct password renders the challenge while an incorrect password returns the generic failure message,...
3.7CVSS6AI score
SaveExploits0References6Affected Software1
20