CVE-2023-49949 Information

Description

Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit codes.

Reference

https://passwork.ru/ https://acribia.ru/articles/2fa_bypass_passwork