Easy!Appointments Improper Access Control vulnerability

MITTEL 4.3CVE-2023-3700 · GHSA-8c6q-26w6-qwhg · Published 17/07/2023 · updated 17/06/2026

Kurz gesagt

CVE-2023-3700 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in alextselegidis/easyappointments, easyappointments (easyappointments).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.44%, höher als bei 38.7% aller Schwachstellen.
Abhilfe: auf 1.5.0 oder neuer aktualisieren.

Package	Affected versions	Patched versions
alextselegidis/easyappointments Packagist	`< 1.5.0`	`1.5.0`
easyappointments easyappointments	`< 1.5.0`	`1.5.0`

Description

Easy!Appointments 1.4.3 and prior has an Improper Access Control vulnerability. This issue is patched at commit b37b46019553089db4f22eb2fe998bca84b2cb64 and anticipated to be part of version 1.5.0.

NVD description

Authorization Bypass Through User-Controlled Key in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

References

nvd.nist.gov/vuln/detail/CVE-2023-3700 · ADVISORY
alextselegidis/easyappointments commit b37b460 · WEB
alextselegidis/easyappointments · PACKAGE
huntr.dev/bounties/e8d530db-a6a7-4f79-a95d-b77654cc04f8 · WEB

Weitere Schwachstellen in alextselegidis/easyappointments

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

alextselegidis/easyappointments

Packagist

< 1.5.0

1.5.0

easyappointments

< 1.5.0

1.5.0

Description

Easy!Appointments 1.4.3 and prior has an Improper Access Control vulnerability. This issue is patched at commit b37b46019553089db4f22eb2fe998bca84b2cb64 and anticipated to be part of version 1.5.0.

NVD description

Authorization Bypass Through User-Controlled Key in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

Weitere Schwachstellen in alextselegidis/easyappointments

Alle anzeigen →