Snipe-IT has a 2FA reset privilege bypass
A user who can edit other users could reset a superadmin's 2FA.
Patched in 8.5.0
为什么是这个 VPI(可解释·实验性)
VPI 计算依据
VPI 公式 vpi-v1
