CVE-2023-2104
published 2023-04-15CVE-2023-2104: Improper Access Control in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
PriorityP428medium5.4CVSS 3.1
AVNACLPRLUINSUCLILAN
EPSS
0.45%
35.7th percentile
Improper Access Control in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| alextselegidis | alextselegidis_easyappointments | >= unspecified < 1.5.0 | 1.5.0 |
| alextselegidis | easyappointments | 0 – 1.4.3 | — |
| easyappointments | easyappointments | < 1.5.0 | 1.5.0 |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
nvdv3.05.4MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
alextselegidis/easyappointments Improper Access Control vulnerability
osv·2023-04-15
CVE-2023-2104 [MEDIUM] alextselegidis/easyappointments Improper Access Control vulnerability
alextselegidis/easyappointments Improper Access Control vulnerability
alextselegidis/easyappointments 1.4.3 and prior allows one provider to view and edit others providers' appointment details. A patch is available at commit 75b24735767868344193fb2cc56e17ee4b9ac4be and anticipated to be part of version 1.5.0.
GHSA
alextselegidis/easyappointments Improper Access Control vulnerability
ghsa·2023-04-15
CVE-2023-2104 [MEDIUM] CWE-284 alextselegidis/easyappointments Improper Access Control vulnerability
alextselegidis/easyappointments Improper Access Control vulnerability
alextselegidis/easyappointments 1.4.3 and prior allows one provider to view and edit others providers' appointment details. A patch is available at commit 75b24735767868344193fb2cc56e17ee4b9ac4be and anticipated to be part of version 1.5.0.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/alextselegidis/easyappointments/commit/75b24735767868344193fb2cc56e17ee4b9ac4behttps://huntr.dev/bounties/3099b8d1-c49c-41b8-a929-73ccded6fc7chttps://github.com/alextselegidis/easyappointments/commit/75b24735767868344193fb2cc56e17ee4b9ac4behttps://huntr.dev/bounties/3099b8d1-c49c-41b8-a929-73ccded6fc7c
2023-04-15
Published