GHSA-347f-rxg8-qgrv

Easy!Appointments uses hard-coded credentials

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-1269

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	alextselegidis/easyappointments	<= 1.4.3	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments 1.4.3 and prior. A patch is available and anticipated to be part of version 1.5.0.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2023-1269 advisory
https://github.com/alextselegidis/easyappointments/commit/2731d2f17c5140c562426b857e9f5d63da5c4593 web
https://github.com/alextselegidis/easyappointments package
https://huntr.dev/bounties/91c31eb6-024d-4ad3-88fe-f15b03fd20f5 web