Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40574
HistoryMay 17, 2023 - 10:57 a.m.

Improper Access Control

2023-05-1710:57:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
improper access control
validation
calendar
appointments
vulnerable

EPSS

0.001

Percentile

34.5%

alextselegidis/easyappointments is vulnerable to Improper Access Control. The vulnerability exists due to the lack of validation of appointments inCalendar.php, which allows an attacker to gain access to other user’s appointments.

EPSS

0.001

Percentile

34.5%