GHSA-hcjv-982c-5f29

ghsaUSosv

Easy!Appointments Denial of Service (DoS)

view advisory published 2025-05-07Licence: CC-BY-4.0

Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-29448US	—	0.58% (48th)	Exploit	2025-05-07
Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all…

references

External citations — patches, advisories, analysis.

https://github.com/Abdullah4eb/CVE-2025-29448WEB
https://github.com/alextselegidis/easyappointmentsPACKAGE
https://github.com/alextselegidis/easyappointments/commit/74633b60f28bdef3cc9f905c0599cef121fee32bWEB
https://nvd.nist.gov/vuln/detail/CVE-2025-29448ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan