CVE-2023-4125: Weak Password Requirements

August 3, 2023 (updated August 8, 2023)

Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.

References

github.com/advisories/GHSA-j63x-f657-2m9g
github.com/answerdev/answer/commit/7d23b17cdbbefcd2e7b5c3150f0b5ec908dc835f
huntr.dev/bounties/85bfd18f-8d3b-4154-8b7b-1f8fcf704e28
nvd.nist.gov/vuln/detail/CVE-2023-4125

Code Behaviors & Features

Detect and mitigate CVE-2023-4125 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →