Product
HotGo versions up to 2.15.1 contain an authentication bypass vulnerability allowing unauthenticated attackers to hijack user and administrator accounts via a predictable SMS verification code.