Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2020-18701

Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token upon logout, which allows for replaying packets.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Talelin
Products
Lin-cms-flask
CVE-2020-18699

Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'.

CVSS 3.1 · 6.1 Medium EPSS 1.3% KEV · Not listed
Vendors
Talelin
Products
Lin-cms-flask
CVE-2020-18698

Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'.

CVSS 3.1 · 9.8 Critical EPSS 2.1% KEV · Not listed
Vendors
Talelin
Products
Lin-cms-flask