GitHub Advisoryadvisory · Packagist

GHSA-8fc2-fhh6-f6m5 Easy!Appointments Improper Restriction of Excessive Authentication Attempts

CRITICAL Published 2025-02-13 Modified 2025-02-24 Official page ↗
Aliases
CVE-2024-57602
Ecosystem
Packagist
Packages
alextselegidis/easyappointments
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-269, CWE-307
Reviewed
2025-02-24

Affected packages

• Packagist alextselegidis/easyappointments: <= 1.5.0 (no fix yet)

Description

An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file.

Related

Alias · CVE (1)

  • CVE-2024-57602 An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file. vulnerability

Weakness · CWE (2)

  • CWE-269 Improper Privilege Management weakness
  • CWE-307 Improper Restriction of Excessive Authentication Attempts weakness

References