Thorsten Rinne phpMyFAQ Authorization Issues Vulnerability

Thorsten Rinne’s phpMyFAQ version 4.2.0-alpha.2 to 4.2.0-beta had an authorization issue. This vulnerability stems from the lack of a brute-force cracking protection mechanism in the removeTwoFactorConfig function, which handles the removal of two-factor authentication. Certified attackers who...