PatchTheCVECVE-2023-22451: Kiwi TCMS is an open source test management system
CVE-2023-22451 is a medium-severity flaw (CVSS 6.5) affecting kiwi tcms. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Kiwi TCMS is an open source test management system. In version 11.6 and prior, when users register new accounts and/or change passwords, there is no validation in place which would prevent them from picking an easy to guess password. This issue is resolved by providing defaults for the `AUTH_PASSWORD_VALIDATORS` configuration setting. As of version 11.7, the password can’t be too similar to other personal information, must contain at least 10 cha
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.5 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.7% (top 46%) |
| CISA exploited list | No |
| Weakness | CWE-521 |
| Published | 2023-01-02 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-22451?
kiwi tcms: upgrade to 11.7. Exact commands for each OS are on this page.
Is CVE-2023-22451 being exploited?
CVE-2023-22451 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-22451 affect?
CVE-2023-22451 affects kiwi tcms. Severity is medium (CVSS 6.5). Kiwi TCMS is an open source test management system. In version 11.6 and prior, when users register new accounts and/or change passwords, there is no validation in place which would prevent them from picking an easy to guess password. This i
How urgent is CVE-2023-22451?
Priority 36/100. No elevated risk signals yet.
Related CVEs
- CVE-2023-36809 HIGH 8.1 UPGRADE Kiwi TCMS, an open source test management system allows users to upload attachments to test plans, test cases,
- CVE-2023-33977 HIGH 8.1 UPGRADE Kiwi TCMS is an open source test management system for both manual and automated testing
- CVE-2023-32686 HIGH 8.1 UPGRADE Kiwi TCMS is an open source test management system for both manual and automated testing
- CVE-2023-30628 HIGH 8.8 UPGRADE Kiwi TCMS is an open source test management system
- CVE-2023-30613 HIGH 8.1 UPGRADE Kiwi TCMS, an open source test management system, allows users to upload attachments to test plans, test cases