Easy!Appointments uses hard-coded credentials

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-1269 · ADVISORY
• alextselegidis/easyappointments commit 2731d2f · WEB
• alextselegidis/easyappointments · PACKAGE
• huntr.dev/bounties/91c31eb6-024d-4ad3-88fe-f15b03fd20f5 · WEB

alextselegidis/easyappointments のその他の脆弱性

• CVE-2026-55651高 7.1Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposure vulnerability in the customers search…
• CVE-2026-52841低 3.1Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Google::oauth` at `application/controllers/Google.php…
• CVE-2026-52840低 2.7Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Caldav::connect_to_server` at `application/controller…
• CVE-2026-52839低 3.3Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 correctly filter provider-scoped appointments in the `appo…
• CVE-2026-52838低 2.6Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 allow administrators to define a custom "booking disabled"…