PT-2026-60642

Name of the Vulnerable Software and Affected Versions Grav versions prior to 2.0.4 Description A two-factor authentication bypass exists in the login plugin. The regenerate2FASecret task fails to verify authorization during the pending TOTP Time-based One-Time Password challenge window, checking...