MEDIUM6.3

GHSA-8c6q-26w6-qwhg

Easy!Appointments Improper Access Control vulnerability

Quick fix

GHSA-8c6q-26w6-qwhg — alextselegidis/easyappointments: upgrade to the fixed version with the command below.

composer require alextselegidis/easyappointments:^1.5.0

Details

Easy!Appointments 1.4.3 and prior has an Improper Access Control vulnerability. This issue is patched at commit b37b46019553089db4f22eb2fe998bca84b2cb64 and anticipated to be part of version 1.5.0.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/alextselegidis/easyappointments

Introduced in: 0Fixed in: 1.5.0

Fixcomposer require alextselegidis/easyappointments:^1.5.0

References

https://nvd.nist.gov/vuln/detail/CVE-2023-3700[ADVISORY]
https://github.com/alextselegidis/easyappointments/commit/b37b46019553089db4f22eb2fe998bca84b2cb64[WEB]
https://github.com/alextselegidis/easyappointments[PACKAGE]
https://huntr.dev/bounties/e8d530db-a6a7-4f79-a95d-b77654cc04f8[WEB]