Lucene search
+L

12 matches found

EUVD
EUVD
•added 2026/07/29 4:22 p.m.•26 views

EUVD-2026-43726

Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure...

7.1CVSS5.8AI score0.00318EPSS
SaveExploits0References4
OSV
OSV
•added 2026/07/29 4:22 p.m.•14 views

GHSA-4VMM-5QVC-W5P7 Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure

Summary An Excessive Data Exposure vulnerability in the customers search endpoint allows an authenticated user to obtain appointment hashes belonging to other users. Using these hashes, an attacker can modify or delete appointments of other providers, resulting in an Appointments Takeover. Detail...

7.1CVSS5.9AI score0.00318EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/07/29 4:22 p.m.•20 views

Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure

Summary An Excessive Data Exposure vulnerability in the customers search endpoint allows an authenticated user to obtain appointment hashes belonging to other users. Using these hashes, an attacker can modify or delete appointments of other providers, resulting in an Appointments Takeover. Detail...

7.1CVSS5.9AI score0.00318EPSS
SaveExploits0References5Affected Software1
GitLab Advisory Database
GitLab Advisory Database
•added 2026/07/29 12:00 a.m.•23 views

Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure

An Excessive Data Exposure vulnerability in the customers search endpoint allows an authenticated user to obtain appointment hashes belonging to other users. Using these hashes, an attacker can modify or delete appointments of other providers, resulting in an Appointments Takeover...

7.1CVSS5.9AI score0.00318EPSS
SaveExploits0References5Affected Software1
Snyk
Snyk
•added 2026/07/14 6:49 p.m.•16 views

Information Exposure

Overview alextselegidis/easyappointments is a powerful Open Source Appointment Scheduler that can be installed on your server. Affected versions of this package are vulnerable to Information Exposure via the customers search endpoint. An attacker can access appointment hashes belonging to other...

7.1CVSS5.7AI score0.00318EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/14 4:17 p.m.•17 views

CVE-2026-55651

Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposure vulnerability in the customers search endpoint allows an authenticated user to obtain appointment hashes belonging to other users. Using these hashes, an attacker can modify or delete appointmen...

7.1CVSS0.00318EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/14 3:31 p.m.•81 views

CVE-2026-55651

Easy!Appointments exposes an Excessive Data Exposure vulnerability in the customers search endpoint (affected in 1.5.2) that allows an authenticated user to obtain appointment hashes belonging to other users, enabling modification or deletion of others’ appointments and leading to an Appointments...

7.1CVSS5.9AI score0.00318EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/14 3:31 p.m.•14 views

CVE-2026-55651 Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure

Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposure vulnerability in the customers search endpoint allows an authenticated user to obtain appointment hashes belonging to other users. Using these hashes, an attacker can modify or delete appointmen...

7.1CVSS6.1AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/14 3:31 p.m.•18 views

CVE-2026-55651 Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure

Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposure vulnerability in the customers search endpoint allows an authenticated user to obtain appointment hashes belonging to other users. Using these hashes, an attacker can modify or delete appointmen...

7.1CVSS5.9AI score0.00318EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/14 3:31 p.m.•47 views

CVE-2026-55651 Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure

Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposure vulnerability in the customers search endpoint allows an authenticated user to obtain appointment hashes belonging to other users. Using these hashes, an attacker can modify or delete appointmen...

7.1CVSS0.00318EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•48 views

PT-2026-58070

Name of the Vulnerable Software and Affected Versions Easy!Appointments versions prior to 1.6.0 Description An excessive data exposure issue in the customers search endpoint allows an authenticated user to obtain appointment hashes belonging to other users. An attacker can use these hashes to...

7.1CVSS5.9AI score0.00318EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•3 views

CVE-2026-55651: Exposure of Sensitive Information to an Unauthorized Actor

Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposure vulnerability in the customers search endpoint allows an authenticated user to obtain appointment hashes belonging to other users. Using these hashes, an attacker can modify or delete appointmen...

7.1CVSS5.8AI score0.00318EPSS
SaveExploits0References2
Rows per page
Query Builder