{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.4.3"}],"component":"alextselegidis/easyappointments","cve_ids":["CVE-2022-1397"],"ecosystem":"Packagist","epss":0.01166,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7f62-4887-cfv5","id":"tcs_01M5KEY037MTGACEX93JWAX90P","modified_at":"2023-11-08T04:07:47.948334Z","published_at":"2022-05-11T00:01:38Z","references":["https://osv.dev/vulnerability/GHSA-7f62-4887-cfv5","https://nvd.nist.gov/vuln/detail/CVE-2022-1397","https://github.com/alextselegidis/easyappointments/commit/63dbb51decfcc1631c398ecd6d30e3a337845526","https://github.com/alextselegidis/easyappointments","https://huntr.dev/bounties/5f69e094-ab8c-47a3-b01d-8c12a3b14c61"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-7f62-4887-cfv5","url":"https://osv.dev/vulnerability/GHSA-7f62-4887-cfv5"}],"summary":"Privilege escalation in easyappointments"}