Vulnerabilidades em calcom
12 resultadosAnálise Vexday
Cal.com apresenta 12 vulnerabilidades catalogadas, sendo 5 críticas e 8 publicadas nos últimos 90 dias, indicando exposição recente significativa. Embora nenhuma CVE esteja sob ataque ativo conhecido, a concentração em problemas de controle de acesso (CWE-284) representa o vetor de risco dominante da plataforma. A velocidade de descoberta sugere necessidade de monitoramento contínuo e priorização de atualizações de segurança.
CVE-2025-71389CRITICALCal.com before 5.9.9 Remote Code Execution via RSCEPSS 0.9%CVE-2025-66489CRITICALCal.com Authentication Bypass via bad TOTP + password checksEPSS 0.9%CVE-2023-1647HIGHImproper Access Control in calcom/cal.comEPSS 0.8%CVE-2026-9349MEDIUMcalcom cal.diy Generic React API bookings-single-view.getServerSideProps.tsx getServerSideProps information disclosureEPSS 0.4%CVE-2026-23478CRITICALCal.com has an Authentication Bypass via Unvalidated Email in Custom JWT CallbackEPSS 0.4%CVE-2024-58354HIGHcal.com Repository Takeover via pull_request_target WorkflowEPSS 0.4%CVE-2023-37919MEDIUMCal.com not expiring old sessions after enabling 2FAEPSS 0.3%CVE-2024-58353CRITICALCal.com through 4.7.15 Cross-Site Scripting via booking questionsEPSS 0.3%CVE-2024-58355CRITICALCal.com through 4.7.15 Cross-Site Scripting via booking questionsEPSS 0.3%CVE-2026-9304LOWcalcom cal.diy Logo API route.ts validateUrlForSSRF server-side request forgeryEPSS 0.2%CVE-2026-63768MEDIUMcal.diy 6.2.0 Conferencing OAuth Callback Open Redirect via Unsigned StateEPSS 0.2%CVE-2026-9303MEDIUMcalcom cal.diy cross-site request forgeryEPSS 0.2%