Cal Security Vulnerabilities

CVE-2023-1647

Improper Access Control in GitHub repository calcom/cal.com prior to 2.7.

CVE-2023-37919

Cal.com is open-source scheduling software. A vulnerability allows active sessions associated with an account to remain active even after enabling 2FA. When activating 2FA on a Cal.com account that is logged in on two or more devices, the account stays logged in on the other device(s) stays logged ...