CVE-2023-3700 MEDIUM

CVE-2023-3700: Authorization Bypass Through User-Controlled Key in alextselegidis/easyappointments

Vendor Alextselegidis
Product alextselegidis/easyappointments
Weakness CWE-639 · IDOR
Published July 17, 2023
Last update October 30, 2024
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Authorization Bypass Through User-Controlled Key in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

Key dates

02Disclosure timeline

July 17, 2023 CVE published
October 30, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-6357 Insecure Direct Object Reference vulnerability CVE-2026-54361 MISP mass assignment vulnerabilities allow unauthorized modification of ownership and delegation records CVE-2025-13389 Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated Information Disclosure CVE-2025-0875 IDOR in Proliz Software's OBS CVE-2026-7144 1000 Projects Portfolio Management System MCA update_passwd_process.php authorization