CVE-2025-60954 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set…
High CVSS: 8.3

CVE-2025-60954

Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set extremely weak passwords, including single-character passwords, which can lead to account compromise, including administrative accounts.
Vendor
Microweber
Product
Microweber
CWE
CWE-521
Yayın Tarihi
2025-10-24 21:16:03
Güncelleme
2025-10-28 14:22:52
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-521 Microweber HIGH Microweber 2025

Referanslar

https://gist.github.com/progprnv/feae2b76f2db0cb2ac6e14b1bf7d8646 https://github.com/microweber/microweber https://github.com/progprnv/CVE-Reports/blob/main/CVE-2025-60954