PT-2020-18336

Name of the Vulnerable Software and Affected Versions wagtail-2fa versions prior to 1.4.1 Description The issue allows any user with access to the CMS to view and delete other users' 2FA devices by going to the correct path, without requiring special permissions. By deleting another user's device...