The vulnerability affects the login function of Strapi's admin screen by allowing circumvention of the rate limit.