CVE-2022-1397

🗓️ 10 May 2022 10:05:10Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 2428 Views

API Privilege Escalation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Full system takeover

Reporter	Title	Published	Views	Family All 13
Huntr	API Privilege Escalation	15 Apr 202216:18	–	huntr
ATTACKERKB	CVE-2022-1397	10 May 202214:15	–	attackerkb
Circl	CVE-2022-1397	10 May 202218:34	–	circl
CNNVD	Easy!Appointments 安全漏洞	10 May 202200:00	–	cnnvd
Cvelist	CVE-2022-1397 API Privilege Escalation in alextselegidis/easyappointments	10 May 202210:05	–	cvelist
EUVD	EUVD-2022-2979	3 Oct 202520:07	–	euvd
Github Security Blog	Privilege escalation in easyappointments	11 May 202200:01	–	github
GitLab Advisory Database	Improper Privilege Management	11 May 202200:00	–	gitlab
NVD	CVE-2022-1397	10 May 202214:15	–	nvd
OSV	CVE-2022-1397 API Privilege Escalation in alextselegidis/easyappointments	10 May 202210:05	–	osv

NVD

Node

easyappointments easyappointmentsRange<1.5.0

[
  {
    "product": "alextselegidis/easyappointments",
    "vendor": "alextselegidis",
    "versions": [
      {
        "lessThan": "1.5.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.dev/bounties/5f69e094-ab8c-47a3-b01d-8c12a3b14c61
github	www.github.com/alextselegidis/easyappointments/commit/63dbb51decfcc1631c398ecd6d30e3a337845526