Perl Punk::Plugin::TOTP 2FA Bypass

A vulnerability in Punk::Plugin::TOTP for Perl allows an attacker with a victim's password and recovery code to bypass two-factor authentication.

The issue lies in the comparison of user identifiers, which can be numerically coerced to zero, allowing an attacker to authenticate as another user.