Threats tagged 'ghsa-hx7r-4xfj-79cc'

A vulnerability in Umami versions 3.3.x, 3.4.0, and 3.4.1 affects the 2FA Policy Handler component, specifically in the file src/app/api/auth/login/route.ts. This flaw allows an attacker to bypass two-factor authentication, effectively reducing the authentication to single-factor. The vulnerability can be exploited remotely. Public exploit details have been disclosed, but the vendor has not responded or issued a fix.