1. Home
  2. CVE Database
  3. CVE-2025-25749
HIGH · 7.1

CVE-2025-25749

An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the lack of enforcement of password strength policies.

Vulnerability Description

An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the lack of enforcement of password strength policies.

CVSS Score

7.1

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
DigitaldruidHoteldruid<= 3.0.7

Related Weaknesses (CWE)

CWE-521

References

FAQ

What is CVE-2025-25749?

CVE-2025-25749 is a vulnerability with a CVSS score of 7.1 (HIGH). An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the lack of enforcement of password strength policies.

How severe is CVE-2025-25749?

CVE-2025-25749 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-25749?

Check the references section above for vendor advisories and patch information. Affected products include: Digitaldruid Hoteldruid.