CVE-2025-25749

An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the lack of enforcement of password strength policies.

CVSS v3.1 CNA

7.1 HIGHCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

EPSS

0.65% chance of exploitation in the next 30 days, 50th percentile

Published

2025-03-11

Updated

2025-03-24

Proof-of-concept exploits (1)

• huyvo2910/CVE-2025-25749-Weak-Password-Policy-in-HotelDruid-3.0.70★ · 2025-03-07

Security advisories

• https://www.huyvo.net/post/cve-2025-25749-weak-password-policy-in-hoteldruid-3-0-7

References

• CVE Record
• NVD entry

Related

• CVE-2025-25747