Easy!Appointments Improper Access Control vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-3700 · ADVISORY
• alextselegidis/easyappointments commit b37b460 · WEB
• alextselegidis/easyappointments · PACKAGE
• huntr.dev/bounties/e8d530db-a6a7-4f79-a95d-b77654cc04f8 · WEB

alextselegidis/easyappointments のその他の脆弱性

• CVE-2026-55651高 7.1Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposure vulnerability in the customers search…
• CVE-2026-52841低 3.1Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Google::oauth` at `application/controllers/Google.php…
• CVE-2026-52840低 2.7Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Caldav::connect_to_server` at `application/controller…
• CVE-2026-52839低 3.3Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 correctly filter provider-scoped appointments in the `appo…
• CVE-2026-52838低 2.6Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 allow administrators to define a custom "booking disabled"…