Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'.
No PoCs from references.
- https://github.com/Live-Hack-CVE/CVE-2020-18698