CVE Catalog
CVE-2023-4125
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.73%
49th percentile - higher than 49% of all known CVEs
Summary
Weak password requirements exist in the GitHub repository answerdev/answer prior to version 1.1.0.
Risk Assessment
Weak passwords may lead to unauthorized access to the system, posing a serious threat to the organization's data security.
Recommendation
It is recommended to upgrade to version 1.1.0 or later and implement strong password policies.
Other vulnerabilities in GitHub repository answerdev/answer
See all- CVE-2023-4126High
Insufficient session expiration exists in the GitHub repository answerdev/answer prior to version 1.1.0, which may lead to unauthorized access.
- CVE-2023-4124Medium
Missing authorization in GitHub repository answerdev/answer prior to version 1.1.1 may lead to unauthorized access to resources.
Original NVD description (English source)
Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.