CVE-2023-3285

creationtimestamp| type| source ---|---|--- 2024-07-09 13:05:32+00:00| seen| https://t.me/cvedetector/304...

CVE-2023-3285

CVE-2023-3285 refers to an Insecure Authorization (BOLA) in the EasyAppointments web app. The vulnerability resides in the POST /appointments endpoint, where a low-privileged user can create an appointment for any user (including administrators), leading to unauthorized data manipulation. Technic...