CVE-2022-3754: phpMyFAQ contains Weak Password Requirements
phpMyFAQ contains Weak Password Requirements
Other sources
phpMyFAQ prior to version 3.1.8 has Weak Password Requirements. Version 3.1.8 introduces an eight-character minimum password length.
— GitHub
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/thorsten/phpmyfaqto a version that resolves this vulnerability.Fixed in 3.1.8 - Upgrade
Upgrade
thorsten/phpmyfaqto a version that resolves this vulnerability.Fixed in 3.1.8
Event History
Frequently Asked Questions
What is CVE-2022-3754?
CVE-2022-3754 is a vulnerability related to weak password requirements in the GitHub repository thorsten/phpmyfaq prior to version 3.1.8.
How severe is CVE-2022-3754?
CVE-2022-3754 has a severity rating of 9.8 (Critical).
Which version of phpMyFAQ is affected by CVE-2022-3754?
The version of phpMyFAQ affected by CVE-2022-3754 is prior to 3.1.8.
How can I fix CVE-2022-3754?
To fix CVE-2022-3754, it is recommended to update to version 3.1.8 or later of phpMyFAQ.
Where can I find more information about CVE-2022-3754?
You can find more information about CVE-2022-3754 on the GitHub repository thorsten/phpmyfaq and the huntr.dev website.