Authentication bypass via flawed state machine 1 Authentication bypass via flawed state machine Feb 22, 2025