Threats tagged 'ghsa-r9x2-mg2v-mq96'

A vulnerability in the email OTP flow's user account lock state check fails to properly validate user input, enabling attackers to determine if specific user accounts are registered. This information disclosure can facilitate brute-force and social engineering attacks, increasing risks such as targeted phishing and potential data compromise.