CVE-2025-60954

Katalog CVE

CVSS 8.3 · High EPSS 0,46%

Kerentanan Weak Password Requirements pada microweber. Skor CVSS 3.1 8.3 (High) menurut CISA ADP.

Deskripsi (NVD)

Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set extremely weak passwords, including single-character passwords, which can lead to account compromise, including administrative accounts.

Rincian

Terbit di NVD

24 Oktober 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.3 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-521: Weak Password Requirements

EPSS (30 hari)

0,46% peluang dieksploitasi; lebih tinggi dari 37,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/progprnv/feae2b76f2db0cb2ac6e14b1bf7d8646 exploit · advisory pihak ketiga
• https://github.com/progprnv/CVE-Reports/blob/main/CVE-2025-60954 exploit · advisory pihak ketiga
• https://github.com/microweber/microweber product