Vulnerabilities

TI-2023-01980 CVE-2023-2105 · GHSA-4qmm-cv4r-qfr4

Session Fixation in alextselegidis/easyappointments

HIGH 73

Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00668 Published 2023-04-15 Fixed in 1.5.0 CWE-384

TI-2023-01979 CVE-2023-2104 · GHSA-fc4g-f42p-7rhp

LOW 25

Improper Access Control in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00447 Published 2023-04-15 Fixed in 1.5.0 CWE-284

TI-2023-01978 CVE-2023-2103 · GHSA-7m8r-gmc3-3p4v

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00475 Published 2023-04-15 Fixed in 1.5.0 CWE-79

TI-2023-01977 CVE-2023-2102 · GHSA-j6qq-9939-9jv8

MEDIUM 55

Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00503 Published 2023-04-15 Fixed in 1.5.0 CWE-79