Missing Authentication For Critical Function

Filament is vulnerable to Missing Authentication For Critical Function. The vulnerability is due to failure to consistently require current-password confirmation for app-based multi-factor authentication MFA management actions, which allows an attacker with access to an authenticated user session...