Lucene search

K
nvd[email protected]NVD:CVE-2023-2104
HistoryApr 15, 2023 - 2:15 p.m.

CVE-2023-2104

2023-04-1514:15:07
CWE-284
web.nvd.nist.gov
3
github
access control
repository
alextselegidis
easyappointments
security

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

34.5%

Improper Access Control in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

Affected configurations

Nvd
Node
easyappointmentseasyappointmentsRange<1.5.0
VendorProductVersionCPE
easyappointmentseasyappointments*cpe:2.3:a:easyappointments:easyappointments:*:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

34.5%