GitHub Advisoryadvisory · Packagist

GHSA-qhm8-69qh-g76j Missing password strength check in notrinos/notrinos-erp

HIGH Published 2022-08-23 Modified 2022-08-30 Official page ↗

Aliases: CVE-2022-2927
Ecosystem: Packagist
Packages: notrinos/notrinos-erp
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses: CWE-521
Reviewed: 2022-08-30

Affected packages

• Packagist notrinos/notrinos-erp: < 0.7 → fixed in 0.7

Description

In versions of notrinos/notrinoserp prior to 0.7 new account passwords were missing a password strength check.

Related

Alias · CVE (1)

CVE-2022-2927 Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7. vulnerability

Weakness · CWE (1)

CWE-521 Weak Password Requirements weakness

References