LI
Product
Lin-cms-flask
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 1Low 0
Watch
Add Lin-cms-flask to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-18701 | 9.8 | Aug 16 | Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's… Affected: 0.1.1 |
| CVE-2020-18698 | 9.8 | Aug 16 | Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component… Affected: 0.1.1 |
| CVE-2020-18699 | 6.1 | Aug 16 | Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component… Affected: 0.1.1 |
Showing 3
