VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 4, 2025· Updated Jan 6, 2025

CVE-2025-22390

CVE-2025-22390

Description

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS due to insufficient enforcement of password complexity requirements. The application permits users to set passwords with a minimum length of 6 characters, lacking adequate complexity to resist modern attack techniques such as password spraying or offline password cracking.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Optimizely/EPiServer.CMS.Coredescription
  • Episerver/CMSllm-fuzzy
    Range: <12.32.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.