← back
CVE-2022-1397

API Privilege Escalation in alextselegidis/easyappointments

CVSS 8.8 HIGHEPSS 1.1%CWE-269
API Privilege Escalation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Full system takeover.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
alextselegidis · alextselegidis/easyappointments

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/alextselegidis/easyappointments/commit/63dbb51decfcc1631c398ecd6d30e3a337845526https://huntr.dev/bounties/5f69e094-ab8c-47a3-b01d-8c12a3b14c61