CVE-2022-2927
published 2022-08-22CVE-2022-2927: Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7.
PriorityP338critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.76%
50.5th percentile
Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| notrinos | notrinos-erp | >= 0 < 0.7 | 0.7 |
| notrinos | notrinos_notrinoserp | >= unspecified < 0.7 | 0.7 |
| notrinos | notrinoserp | < 0.7 | 0.7 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.07.3HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Missing password strength check in notrinos/notrinos-erp
osv·2022-08-23
CVE-2022-2927 [HIGH] Missing password strength check in notrinos/notrinos-erp
Missing password strength check in notrinos/notrinos-erp
In versions of notrinos/notrinoserp prior to 0.7 new account passwords were missing a password strength check.
GHSA
Missing password strength check in notrinos/notrinos-erp
ghsa·2022-08-23
CVE-2022-2927 [HIGH] CWE-521 Missing password strength check in notrinos/notrinos-erp
Missing password strength check in notrinos/notrinos-erp
In versions of notrinos/notrinoserp prior to 0.7 new account passwords were missing a password strength check.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/notrinos/notrinoserp/commit/e61e76b44c6a2b28a4a648a06ef34f65c376ec1ehttps://huntr.dev/bounties/7fa956dd-f541-4dcd-987d-ba15caa6a886https://github.com/notrinos/notrinoserp/commit/e61e76b44c6a2b28a4a648a06ef34f65c376ec1ehttps://huntr.dev/bounties/7fa956dd-f541-4dcd-987d-ba15caa6a886
2022-08-22
Published