Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the ‘login’ function in the component ‘app/api/cms/user.py’.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18698
Reference (s):
- https://github.com/TaleLin/lin-cms-flask/issues/27