Yüksek CVSS 8.3 PoC var
CVE-2025-60954: Microweber: güvenlik açığı
Açıklama (NVD)
Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set extremely weak passwords, including single-character passwords, which can lead to account compromise, including administrative accounts.
Özet bilgiler
- Ürün
- Microweber Microweber
- CVSS v3.1
- 8.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L - EPSS
- %0,46 (yüzdelik 40)
- CWE
- CWE-521
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| microweber-microweber | 2.0.0 | 2.0.0 | — |