Skip to content
OpenAdvisories
High · 7.7 CVE-2023-3286 EUVD-2023-43961GHSA-g7c3-8m39-444q

A BOLA vulnerability in POST /secretaries in EasyAppointments < 1.5.0

Published Jul 9, 2024 · Updated Aug 2, 2024 · Assigned by palo_alto

Description

A BOLA vulnerability in POST /secretaries allows a low privileged user to create a low privileged user (secretary) in the system. This results in unauthorized data manipulation.

Affected products

VendorProductAffectedFixed
— easyappointments — —

References