EUVD-2023-28121

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Booked Scheduler 2.5.5 allows event creation for other users due to userId modification vulnerability.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-24058	22 Jan 202312:23	–	circl
CNNVD	Booked Scheduler 安全漏洞	22 Jan 202300:00	–	cnnvd
CVE	CVE-2023-24058	22 Jan 202300:00	–	cve
Cvelist	CVE-2023-24058	22 Jan 202300:00	–	cvelist
NVD	CVE-2023-24058	22 Jan 202306:15	–	nvd
OSV	CVE-2023-24058	22 Jan 202306:15	–	osv
Prion	Code injection	22 Jan 202306:15	–	prion
RedhatCVE	CVE-2023-24058	23 May 202501:55	–	redhatcve
Vulnrichment	CVE-2023-24058	22 Jan 202300:00	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "22bdd0f8-8d00-3e7f-8d2a-31d6c044416e",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "f4599402-4b1b-3b97-b6fe-6146354fd379",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
s1n1st3r	www.s1n1st3r.gitbook.io/theb10g/booked-scheduler-v2.5.5-vulnerability
limswiki	www.limswiki.org/index.php/Booked
github	www.github.com/LibreBooking/app/tags
github	www.github.com/LibreBooking/app/blob/0a6cb1a9eb84835553c8caf93db2791f8655140f/Web/ajax/reservation_save.php
github	www.github.com/LibreBooking/app/blob/0a6cb1a9eb84835553c8caf93db2791f8655140f/Pages/Ajax/ReservationSavePage.php
labarchives	www.labarchives.com/labarchives-knowledge-base/2022-feature-releases-2/
bookedscheduler	www.bookedscheduler.com/the-future-of-booked/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-24058

03 Oct 2025 20:07Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.14.3

EPSS0.00481

SSVC