GitHub Advisoryadvisory · Packagist

GHSA-hcjv-982c-5f29 Easy!Appointments Denial of Service (DoS)

MEDIUM Published 2025-05-07 Modified 2025-05-08 Official page ↗
Aliases
CVE-2025-29448
Ecosystem
Packagist
Packages
alextselegidis/easyappointments
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Weaknesses
CWE-20
Reviewed
2025-05-07

Affected packages

• Packagist alextselegidis/easyappointments: <= 1.5.1 (no fix yet)

Description

Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability.

Related

Alias · CVE (1)

  • CVE-2025-29448 Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations,… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References