CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Appointment Booking Calendar: from n/a through <= 1.3.92.
Explanation of Vulnerability in Simple Terms
Appointment Booking Calendar versions up to 1.3.92 lack proper authorization checks, allowing unauthenticated attackers to disrupt the booking service. An attacker can send requests over the network without authentication to trigger a denial-of-service condition. This affects all installations without a security update.
What an attacker can do
Disrupt the appointment booking service without logging in or user interaction.
Potential impact on your site
Visitors cannot book appointments when the service is disrupted by an attacker.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
