CVE-2025-25749

Name of the Vulnerable Software and Affected Versions: HotelDruid versions 3.0.7 and earlier

Description: The issue allows users to set weak passwords due to the lack of enforcement of password strength policies.

Recommendations: For HotelDruid versions 3.0.7 and earlier, consider implementing a custom password strength policy to enforce strong passwords until a patch is available. As a temporary workaround, restrict the ability of users to set weak passwords by configuring the system to require a minimum password length and complexity.