CVE-2020-18701

2021-08-1617:55:27

mitre

www.cve.org

9.5 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.9%

JSON

Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user’s authentication token upon logout, which allows for replaying packets.

References

cwe.mitre.org/data/definitions/613.html

github.com/TaleLin/lin-cms-flask/issues/30