CVE-2022-1397

API Privilege Escalation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Full system takeover...

CVE-2022-1397

creationtimestamp| type| source ---|---|--- 2022-05-10 18:34:24+00:00| seen| https://t.me/cibsecurity/42253 2024-01-16 14:09:50+00:00| published-proof-of-concept| https://t.me/arpsyndicate/2857...

CVE-2022-1397

API Privilege Escalation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Full system takeover...

CVE-2022-1397

CVE-2022-1397 affects Easy!Appointments (GitHub: alextselegidis/easyappointments). The vulnerability is an API privilege escalation arising from inadequate authorization checks: the API validates existence of a user but not their permissions, allowing a low-privileged user (e.g., provider) to cre...