by Kastro
Paper/Archive/CVE-2023-1269

CVE-2023-1269

alextselegidis alextselegidis/easyappointments — Use of Hard-coded Credentials in alextselegidis/easyappointments

EPSS 0.7%public exploitCVSS 9.8
critical.is priorityof 100
50
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 54.7.547 × 2010.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

Affected

ProductAffectedFixed inSource
alextselegidis/easyappointmentsunspecified – < 1.5.01.5.0CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
@huntrdev (CNA)6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

refhuntr.dev/bounties/91c31eb6-024d-4ad3-88fe-f15b03fd20f5refgithub.com/alextselegidis/easyappointments/commit/2731d2f17c5140c562426b857e9f5d63da5c4593