Lucene search

K
osvGoogleOSV:GHSA-FC4G-F42P-7RHP
HistoryApr 15, 2023 - 3:30 p.m.

alextselegidis/easyappointments Improper Access Control vulnerability

2023-04-1515:30:14
Google
osv.dev
16
vulnerability
access control
software security
patch
version 1.5.0

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

34.5%

alextselegidis/easyappointments 1.4.3 and prior allows one provider to view and edit others providers’ appointment details. A patch is available at commit 75b24735767868344193fb2cc56e17ee4b9ac4be and anticipated to be part of version 1.5.0.

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

34.5%