CRITICAL9.8

GHSA-347f-rxg8-qgrv

Easy!Appointments uses hard-coded credentials

Details

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments 1.4.3 and prior. A patch is available and anticipated to be part of version 1.5.0.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/alextselegidis/easyappointments

Introduced in: 0

No fixed version published yet for alextselegidis/easyappointments (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1269[ADVISORY]
https://github.com/alextselegidis/easyappointments/commit/2731d2f17c5140c562426b857e9f5d63da5c4593[WEB]
https://github.com/alextselegidis/easyappointments[PACKAGE]
https://huntr.dev/bounties/91c31eb6-024d-4ad3-88fe-f15b03fd20f5[WEB]