2FA Bypass via Reset Password

A logic flaw in the password reset flow allowed a complete Two-Factor Authentication (2FA) bypass.
After enabling 2FA using Google…