MFA and Account Lockout Bypass Vulnerability in Obsidian Scheduler 5.0.0 - 6.3.0

Summary &#xA; A vulnerability has been identified in Obsidian Scheduler that allows for bypassing multi-factor authentication (MFA) enforcement and gaining unauthorized administrative access. Critically, this bypass also allows login to accounts that have been locked out due to MFA non-enrollment after 7 days, effectively defeating the application&rsquo;s account protection mechanism. This flaw is…