Information Disclosure

2023-01-0303:29:47

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

kiwitcms

vulnerability

password validation

information disclosure

weak passwords

attacker

EPSS

0.002

Percentile

55.8%

JSON

kiwitcms is vulnerable to information disclosure. The vulnerability exists because the common.py does not enable the password validators to avoid users choosing weak passwords when the users register new accounts or change passwords, allowing an attacker to guess the password.