Vulners
Lucene search
š Easy!Appointments 1.5.1 Denial of Service
šļøĀ 08 May 2025Ā 00:00:00Reported byĀ Abdullah AlmutairiTypeĀ 
Ā packetstormšĀ packetstorm.newsšĀ 93Ā Views
| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | CVE-2025-29448 | 8 May 202517:24 | ā | circl |
 | Easy!Appointments å®å Øę¼ę“ | 7 May 202500:00 | ā | cnnvd |
 | CVE-2025-29448 | 7 May 202500:00 | ā | cve |
 | CVE-2025-29448 | 7 May 202500:00 | ā | cvelist |
 | EUVD-2025-13871 | 3 Oct 202520:07 | ā | euvd |
 | Easy!Appointments Denial of Service (DoS) | 7 May 202515:31 | ā | github |
 | Easy!Appointments Denial of Service (DoS) | 7 May 202500:00 | ā | gitlab |
 | CVE-2025-29448 | 7 May 202515:15 | ā | nvd |
 | CVE-2025-29448 | 7 May 202515:15 | ā | osv |
| GHSA-HCJV-982C-5F29 Easy!Appointments Denial of Service (DoS) | 7 May 202515:31 | ā | osv |
10
# CVE-2025-29448
# Description
booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability.
# Steps to Reproduce
1. Intercept an appointment booking request.
2. Locate the `post_data[appointment][end_datetime]` parameter in the request body.
3. Modify the parameter value to a date far in the future and send the request.
4. The application accepts the long booking, blocking all future availability and causing a denial of service.
# Fixed in Commit
https://github.com/alextselegidis/easyappointments/commit/74633b60f28bdef3cc9f905c0599cef121fee32bData
Build on a solid foundation withĀ Vulners data
WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data
Api
Power your application withĀ Vulners API
The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access
App
Assess and manage vulnerabilities withĀ VulnersĀ tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
08 May 2025 00:00Current
9.2High risk
Vulners AI Score9.2
CVSS 3.17.5
EPSS0.00538
SSVC