Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-38054
9.9
CRITICALCVSS v3
Severity scale
010
Description
A BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} allows a low privileged user to fetch, modify or delete a low privileged user (customer). This results in unauthorized access and unauthorized data manipulation.
alextselegidis/easyappointments
GitHub:date: Easy!Appointments - Self Hosted Appointment Scheduler
GitHub:date: Easy!Appointments - Self Hosted Appointment Scheduler< 1.5.0NVD