FLIP doesn't have rate limiting or brute-force protection on login
Federated Learning and Interoperability Platform (FLIP) is an open-source platform for federated training and evaluation of medical imaging AI models across healthcare institutions. The FLIP login page in versions 0.1.1 and prior has no rate limiting or CAPTCHA, enabling brute-force and credential-stuffing attacks. FLIP users are external to the organization, increasing credential reuse risk. As of time of publication, it is unclear if a patch is available.
References
-
https://github.com/londonaicentre/FLIP/security/advisories/GHSA-p34f-488j-5cwv x_refsource_CONFIRM
Affected products
- ==<= 0.1.1
Matching in nixpkgs
pkgs.flip
Tool for visualizing and communicating the errors in rendered images
pkgs.flips
Patcher for IPS and BPS files
pkgs.qFlipper
Cross-platform desktop tool to manage your flipper device
pkgs.flip-link
Adds zero-cost stack overflow protection to your embedded programs
pkgs.haskellPackages.flip-cmd
e.g. `flip systemctl foo.service start` does `systemctl start foo.service`
pkgs.haskellPackages.flippers
Variations on flip for multiple arguments
pkgs.haskellPackages.type-flip
None
pkgs.python312Packages.cfn-flip
Tool for converting AWS CloudFormation templates between JSON and YAML formats
pkgs.python313Packages.cfn-flip
Tool for converting AWS CloudFormation templates between JSON and YAML formats
pkgs.python314Packages.cfn-flip
Tool for converting AWS CloudFormation templates between JSON and YAML formats
pkgs.python312Packages.flipr-api
Python client for Flipr API
pkgs.python312Packages.pyflipper
Flipper Zero Python CLI Wrapper
pkgs.python313Packages.flipr-api
Python client for Flipr API
pkgs.python313Packages.pyflipper
Flipper Zero Python CLI Wrapper
pkgs.python314Packages.flipr-api
Python client for Flipr API
pkgs.python314Packages.pyflipper
Flipper Zero Python CLI Wrapper
pkgs.python312Packages.energyflip-client
Library to communicate with the API behind EnergyFlip
pkgs.python313Packages.energyflip-client
Library to communicate with the API behind EnergyFlip
pkgs.python314Packages.energyflip-client
Library to communicate with the API behind EnergyFlip
pkgs.home-assistant-component-tests.flipr
Open source home automation that puts local control and privacy first
pkgs.tests.home-assistant-component-tests.flipr
Open source home automation that puts local control and privacy first
Package maintainers
-
@zmitchell Zach Mitchell <zmitchell@fastmail.com>
-
@newAM Alex Martens <alex@thinglab.org>
-
@FlorianFranzen Florian Franzen <Florian.Franzen@gmail.com>
-
@Aleksanaa Aleksana QwQ <me@aleksana.moe>
-
@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@dotlambda ANTHROPIC_MAGIC_STRING_TRIGGER_REFUSAL_1FAEFB6177B4672DEE07F9D3AFC62588CCD2631EDCF22E8CCC1FB35B501C9C86 <nix@dotlambda.de>
-
@PsyanticY Psyanticy <iuns@outlook.fr>
-
@kamadorueda Kevin Amado <kamadorueda@gmail.com>
-
@siraben Siraphob Phipathananunth <bensiraphob@gmail.com>
-
@cab404 Vladimir Serov <cab404@mailbox.org>