GitHub Advisoryadvisory · PyPI

GHSA-h6r2-pgvx-683c Lin-CMS-Flask vulnerable to Improper Authentication

CRITICAL Published 2022-05-24 Modified 2026-06-10 Official page ↗
Aliases
CVE-2020-18698
Ecosystem
PyPI
Packages
Lin-CMS
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-307
Reviewed
2024-05-01

Affected packages

• PyPI Lin-CMS: 0.1.1 (no fix yet)

Description

Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component `app/api/cms/user.py`.

Related

Alias · CVE (1)

  • CVE-2020-18698 Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the… vulnerability

Weakness · CWE (1)

  • CWE-307 Improper Restriction of Excessive Authentication Attempts weakness

References