DayByDay CRM Information Disclosure Vulnerability (CNVD-2022-68550)

DayByDay CRM is an open source CRM (Customer Relationship Management) software developed based on Laravel that helps users track customers, tasks, meetings, etc. An information disclosure vulnerability exists in DayByDay CRM. The vulnerability stems from the product’s update feature that does not do effective validation of password strength, and an attacker can create extremely low strength passwords through this vulnerability.