Severity: Critical
CVSS Score: 9.8
Pimcore before 6.2.2 lacks brute force protection for the 2FA token.