CVE-2020-18698 - Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'

Back Back to CVE browser

CRITICAL

Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'

Published Aug 16, 2021

9.3

CRITICAL

CVSS 4.0

EPSS 2.04%

Description

Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-307

References (5)

https://cwe.mitre.org/data/definitions/307.html
x_refsource_MISCThird Party Advisory
https://github.com/TaleLin/lin-cms-flask/issues/27
x_refsource_MISCExploitThird Party Advisory
https://github.com/advisories/GHSA-h6r2-pgvx-683c
Advisory
https://github.com/pypa/advisory-database/tree/main/vulns/lin-cms/PYSEC-2021-339.yaml
https://nvd.nist.gov/vuln/detail/CVE-2020-18698

Link	Providers	Tags
https://cwe.mitre.org/data/definitions/307.html		x_refsource_MISCThird Party Advisory
https://github.com/TaleLin/lin-cms-flask/issues/27		x_refsource_MISCExploitThird Party Advisory
https://github.com/advisories/GHSA-h6r2-pgvx-683c		Advisory
https://github.com/pypa/advisory-database/tree/main/vulns/lin-cms/PYSEC-2021-339.yaml
https://nvd.nist.gov/vuln/detail/CVE-2020-18698