漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password Change
Vulnerability Description
Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the application allows users to set weak passwords (e.g., 1234, password) without enforcing minimum strength requirements. Additionally, active sessions remain valid after a user changes their password. An attacker who compromises an account (via brute-force or credential stuffing) can maintain persistent access even after the victim resets their password. Version 2.0.0 contains a fix.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Vulnerability Type
弱口令要求
Vulnerability Title
Vikunja 代码问题漏洞
Vulnerability Description
Vikunja是Vikunja开源的一个待办事项应用程序。 Vikunja 2.0.0之前版本存在代码问题漏洞，该漏洞源于允许设置弱密码且用户更改密码后活动会话仍然有效，可能导致账户劫持和持久访问。
CVSS Information
N/A
Vulnerability Type
N/A