alextselegidis/easyappointments · Security
Easy!Appointments Improper Access Control vulnerability
- GHSA ID
- GHSA-8c6q-26w6-qwhg
- CVE ID
- CVE-2023-3700
- Severity
- medium
- Published
- Updated
- CVSS
- 6.3 · CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS v3
- 6.3 · CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
Easy!Appointments 1.4.3 and prior has an Improper Access Control vulnerability. This issue is patched at commit b37b46019553089db4f22eb2fe998bca84b2cb64 and anticipated to be part of version 1.5.0.
CWEs
- CWE-284 · Improper Access Control
- CWE-639 · Authorization Bypass Through User-Controlled Key