Paper/Archive/CVE-2022-0482

CVE-2022-0482

alextselegidis alextselegidis/easyappointments — Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments

EPSS 44%CVSS 9.1

critical.is priorityof 100

47

CVSS 9.1 (NVD, CNA agree)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 98.7.987 × 2019.7 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3.

Affected

ProductAffectedFixed inSource

alextselegidis/easyappointmentsunspecified – < 1.4.31.4.3CNA

Scores by source

@huntrdev (CNA)9.1CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refhuntr.dev/bounties/2fe771ef-b615-45ef-9b4d-625978042e26 refgithub.com/alextselegidis/easyappointments/commit/44af526a6fc5e898bc1e0132b2af9eb3a9b2c466 refpacketstormsecurity.com/files/166701/Easy-Appointments-Information-Disclosure.html refopencirt.com/hacking/securing-easy-appointments-cve-2022-0482