If I were to guess this flaw was a result of monkey-patching to support 2FA that didn't quite consider different scenarios. I've come across a few authenticati

If I were to guess this flaw was a result of monkey-patching to support 2FA that didn't quite consider different scenarios. I've come across a few authentication bypass vulns that seem similar.