Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
FLIP doesn't have rate limiting or brute-force protection on login
Vulnerability Description
Federated Learning and Interoperability Platform (FLIP) is an open-source platform for federated training and evaluation of medical imaging AI models across healthcare institutions. The FLIP login page in versions 0.1.1 and prior has no rate limiting or CAPTCHA, enabling brute-force and credential-stuffing attacks. FLIP users are external to the organization, increasing credential reuse risk. As of time of publication, it is unclear if a patch is available.
CVSS Information
N/A
Vulnerability Type
过多认证尝试的限制不恰当
Vulnerability Title
Federated Learning and Interoperability Platform 安全漏洞
Vulnerability Description
Federated Learning and Interoperability Platform是London AI Centre开源的一个医疗影像学习平台。 Federated Learning and Interoperability Platform(FLIP) 0.1.1及之前版本存在安全漏洞，该漏洞源于登录页面缺少速率限制或验证码，可能导致暴力破解和凭据填充攻击。
CVSS Information
N/A
Vulnerability Type
N/A