LI
Product
Lin-cms-flask
by Talelin · last CVE Aug 16, 2021
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 1Low 0
Watch

Add Lin-cms-flask to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-18701
9.8
2%
Aug 16
Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's…
Affected: 0.1.1
CVE-2020-18698
9.8
2%
Aug 16
Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component…
Affected: 0.1.1
CVE-2020-18699
6.1
1%
Aug 16
Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component…
Affected: 0.1.1
Showing 3