CVE-2020-18701

Publication date

2021-08-16 17:55:27

Family

mitre

State

PUBLISHED

Description

Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a users authentication token upon logout, which allows for replaying packets.