Описание
alextselegidis/easyappointments Improper Access Control vulnerability
alextselegidis/easyappointments 1.4.3 and prior allows one provider to view and edit others providers' appointment details. A patch is available at commit 75b24735767868344193fb2cc56e17ee4b9ac4be and anticipated to be part of version 1.5.0.
Пакеты
Наименование
alextselegidis/easyappointments
composer
Затронутые версииВерсия исправления
<= 1.4.3
Отсутствует
Связанные уязвимости
CVSS3: 5.4
nvd
почти 3 года назад
Improper Access Control in GitHub repository alextselegidis/easyappointments prior to 1.5.0.