CVE-2025-25749

An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the lack of enforcement of password strength policies.

Affected products

Debian, Hoteldruid

Digitaldruid Hoteldruid

≤ 3.0.7

Fix

Available

CVSS 3.1

7.1 HIGH

EPSS

0.6% (47th percentile)

Weakness

CWE-521

NVD status

Analyzed

Published

2025-03-11