Improper Authentication

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Improper Authentication in the login.regenerate2FASecret process. An attacker can gain unauthorized access by submitting a correct password fo...