CVE-2020-18698: Talelin Lin-CMS-Flask

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'.

Affected products

• Talelin Lin-CMS-Flask: version 0.1.1 only

Published 2021-08-16. Last modified 2026-06-17.