Brute Force Attack

devise-two-factor is vulnerable to Brute Force Attack. The vulnerability is due to a lack of attempt restriction of login attempts in Devise-Two-Factor. This issue, when combined with the inherent entropy limitations of the Time-based One-Time Password (TOTP) algorithm, This allows an attacker to potentially bypass the two-factor authentication (2FA) mechanism through brute-force attacks.