API Privilege Escalation in alextselegidis/easyappointments
CVE-2022-1397

8.8HIGH

Key Information:

Vendor

Alextselegidis

Status
Alextselegidis/easyappointments
Vendor
CVE Published:
10 May 2022

What is CVE-2022-1397?

API Privilege Escalation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Full system takeover.

Affected Version(s)

alextselegidis/easyappointments < 1.5.0

References

https://huntr.dev/bounties/5f69e094-ab8c-47a3-b01d-8c12a3...
x_refsource_CONFIRM
https://github.com/alextselegidis/easyappointments/commit...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

CVSS V3.0

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.