CVE-2021-25923

Katalog CVE

CVSS 8.1 · High EPSS 1,3%

Kerentanan Weak Password Requirements pada open-emr openemr. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

In OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not enforce a maximum password length limit. If a malicious user is aware of the first 72 characters of the victim user’s password, he can leverage it to an account takeover.

Rincian

Terbit di NVD

24 Juni 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-521: Weak Password Requirements

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/openemr/openemr/commit/28ca5c008d4a408b60001a67dfd3e0915f9181e0 patch · advisory pihak ketiga
• https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25923 exploit · advisory pihak ketiga