CVE-2023-22451

CVE-2023-22451 is a high-severity vulnerability affecting Kiwi TCMS versions 11.6 and prior, stemming from a lack of password validation during account registration and password changes. This allows users to set easily guessable passwords, leading to potential unauthorized access. The vulnerability has a CVSS score of 8.8 (High), indicating that it can be exploited remotely with low attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the risk remains due to the ease of exploitation.