GHSA-8c6q-26w6-qwhg

ghsaUSosv

Easy!Appointments Improper Access Control vulnerability

view advisory published 2023-07-17Licence: CC-BY-4.0

Easy!Appointments 1.4.3 and prior has an Improper Access Control vulnerability. This issue is patched at commit b37b46019553089db4f22eb2fe998bca84b2cb64 and anticipated to be part of version 1.5.0.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-3700US	medium4.3	0.44% (38th)	—	2023-07-17
Authorization Bypass Through User-Controlled Key in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

references

External citations — patches, advisories, analysis.

https://github.com/alextselegidis/easyappointmentsPACKAGE
https://github.com/alextselegidis/easyappointments/commit/b37b46019553089db4f22eb2fe998bca84b2cb64WEB
https://huntr.dev/bounties/e8d530db-a6a7-4f79-a95d-b77654cc04f8WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-3700ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan