CVE-2020-18698: Critical severity lin-cms-flask vulnerability

Published Aug 16, 2021

Updated

Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'.

Other sources

Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component app/api/cms/user.py.

— GitHub

Affected Software

2 affected components

pip/Lin-CMS=0.1.1

Talelin Lin-cms-flask=0.1.1

Event History

Aug 16, 2021

CVE Published

via MITRE·05:54 PM

Data Sourced

via MITRE·05:54 PM

Description

May 24, 2022

Advisory Published

via GitHub·07:11 PM

Frequently Asked Questions

What is the severity of CVE-2020-18698?

CVE-2020-18698 is classified as a high severity vulnerability due to its potential to allow remote attackers to perform brute force login attempts.

How do I fix CVE-2020-18698?

To mitigate CVE-2020-18698, implement rate limiting on login attempts and consider adding more robust authentication mechanisms.

Who is affected by CVE-2020-18698?

CVE-2020-18698 affects users of Lin-CMS-Flask version 0.1.1.

What component is involved in CVE-2020-18698?

CVE-2020-18698 involves the 'login' function in the app/api/cms/user.py component of Lin-CMS-Flask.

What kind of attack can be launched due to CVE-2020-18698?

Due to CVE-2020-18698, attackers can launch unrestricted brute force login attempts against the application.