MEDIUM

GHSA-hcjv-982c-5f29

Easy!Appointments Denial of Service (DoS)

Details

Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/alextselegidis/easyappointments

Introduced in: 0

No fixed version published yet for alextselegidis/easyappointments (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-29448[ADVISORY]
https://github.com/alextselegidis/easyappointments/commit/74633b60f28bdef3cc9f905c0599cef121fee32b[WEB]
https://github.com/Abdullah4eb/CVE-2025-29448[WEB]
https://github.com/alextselegidis/easyappointments[PACKAGE]