—
PYSEC-2021-339
Details
Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / lin-cms
Introduced in:
0 No fixed version published yet for lin-cms (pip). Pin to a known-safe version or switch to an alternative.