Description
Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | lin-cms | 0.1.1 | — | GHSA-h6r2-pgvx-683c |
| PyPI | lin-cms | all versions | — | PYSEC-2021-339 |