CVE-2022-0482

Packagist/alextselegidis/easyappointments CVE-2022-0482: critical 9.1

Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments

Action: Upgrade alextselegidis/easyappointments to 1.4.3 or later.

composer require alextselegidis/easyappointments:1.4.3

Affected

Fixed versions

Sources

• osv: GHSA-r6cm-wg48-rh2r
• https://nvd.nist.gov/vuln/detail/CVE-2022-0482
• https://github.com/alextselegidis/easyappointments/commit/44af526a6fc5e898bc1e0132b2af9eb3a9b2c466
• https://github.com/alextselegidis/easyappointments
• https://github.com/alextselegidis/easyappointments/releases/tag/1.4.3
• https://huntr.dev/bounties/2fe771ef-b615-45ef-9b4d-625978042e26
• https://opencirt.com/hacking/securing-easy-appointments-cve-2022-0482
• http://packetstormsecurity.com/files/166701/Easy-Appointments-Information-Disclosure.html

CVE-2022-0482 · published 2022-03-10T00:00:40Z · modified 2024-02-19T05:33:41.330659Z · JSON