GHSA-8c6q-26w6-qwhg

Easy!Appointments Improper Access Control vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-3700

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	alextselegidis/easyappointments	< 1.5.0	1.5.0

Details

As written in the advisory (Markdown source, shown as plain text).

Easy!Appointments 1.4.3 and prior has an Improper Access Control vulnerability. This issue is patched at commit b37b46019553089db4f22eb2fe998bca84b2cb64 and anticipated to be part of version 1.5.0.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2023-3700 advisory
https://github.com/alextselegidis/easyappointments/commit/b37b46019553089db4f22eb2fe998bca84b2cb64 web
https://github.com/alextselegidis/easyappointments package
https://huntr.dev/bounties/e8d530db-a6a7-4f79-a95d-b77654cc04f8 web