{"id":"GHSA-qhm8-69qh-g76j","aliases":["CVE-2022-2927"],"title":"Missing password strength check in notrinos/notrinos-erp","description":"In versions of notrinos/notrinoserp prior to 0.7 new account passwords were missing a password strength check.","severity":"high","score":7.3,"published":"2022-08-23T00:00:19.000Z","modified":"2023-11-08T04:09:12.904Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"notrinos/notrinos-erp","ranges":[{"events":[{"introduced":"0"},{"fixed":"0.7"}],"type":"ECOSYSTEM"}],"versions":["0.6"],"fixed":["0.7"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2022-2927","https://github.com/notrinos/notrinoserp/commit/e61e76b44c6a2b28a4a648a06ef34f65c376ec1e","https://github.com/notrinos/notrinoserp","https://huntr.dev/bounties/7fa956dd-f541-4dcd-987d-ba15caa6a886"],"sources":[{"name":"OSV","id":"GHSA-qhm8-69qh-g76j","modified":"2023-11-08T04:09:12.904975Z","url":"https://osv.dev/vulnerability/GHSA-qhm8-69qh-g76j"}],"assessments":[{"source":"OSV","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","score":7.3}]}