Lucene search

@huntrdevCVE-2023-1647

HistoryMar 27, 2023 - 1:15 a.m.

CVE-2023-1647

2023-03-2701:15:07

CWE-284

@huntrdev

web.nvd.nist.gov

cve-2023-1647

improper access control

github

repository

calcom

cal.com

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

31.8%

JSON

Improper Access Control in GitHub repository calcom/cal.com prior to 2.7.

Affected configurations

Nvd

Node

calcal.comRange<2.7.0

VendorProductVersionCPE
calcal.com*cpe:2.3:a:cal:cal.com:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cal	cal.com	*	cpe:2.3:a:cal:cal.com::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "calcom/cal.com",
    "vendor": "calcom",
    "versions": [
      {
        "lessThan": "2.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/sbs20/scanservjs/pull/606/commits/d51fd52c1569813990b8f74e64ae6979c665dca1

huntr.dev/bounties/d6de3d6e-9551-47d1-b28c-7e965c1b82b6

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

31.8%

JSON

Related for CVE-2023-1647