CVE-2020-18701: Talelin Lin-CMS-Flask

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token upon logout, which allows for replaying packets.

Affected products

• Talelin Lin-CMS-Flask: version 0.1.1 only

Published 2021-08-16. Last modified 2026-06-17.