alextselegidis/easyappointments Improper Access Control vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-2104 · ADVISORY
• alextselegidis/easyappointments commit 75b2473 · WEB
• alextselegidis/easyappointments · PACKAGE
• huntr.dev/bounties/3099b8d1-c49c-41b8-a929-73ccded6fc7c · WEB

alextselegidis/easyappointments のその他の脆弱性

• CVE-2026-55651高 7.1Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposure vulnerability in the customers search…
• CVE-2026-52841低 3.1Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Google::oauth` at `application/controllers/Google.php…
• CVE-2026-52840低 2.7Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Caldav::connect_to_server` at `application/controller…
• CVE-2026-52839低 3.3Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 correctly filter provider-scoped appointments in the `appo…
• CVE-2026-52838低 2.6Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 allow administrators to define a custom "booking disabled"…