{"action":"Upgrade alextselegidis/easyappointments to 1.4.3 or later.","affected":[{"fixed":"1.4.3","introduced":"0"}],"component":"alextselegidis/easyappointments","cve_ids":["CVE-2022-0482"],"ecosystem":"Packagist","epss":0.43746,"exploited":false,"fixed_versions":["1.4.3"],"ghsa_id":"GHSA-r6cm-wg48-rh2r","id":"tcs_01M5KF7YWTQVX6TCYKVXXA4X09","modified_at":"2024-02-19T05:33:41.330659Z","published_at":"2022-03-10T00:00:40Z","references":["https://osv.dev/vulnerability/GHSA-r6cm-wg48-rh2r","https://nvd.nist.gov/vuln/detail/CVE-2022-0482","https://github.com/alextselegidis/easyappointments/commit/44af526a6fc5e898bc1e0132b2af9eb3a9b2c466","https://github.com/alextselegidis/easyappointments","https://github.com/alextselegidis/easyappointments/releases/tag/1.4.3","https://huntr.dev/bounties/2fe771ef-b615-45ef-9b4d-625978042e26","https://opencirt.com/hacking/securing-easy-appointments-cve-2022-0482","http://packetstormsecurity.com/files/166701/Easy-Appointments-Information-Disclosure.html"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-r6cm-wg48-rh2r","url":"https://osv.dev/vulnerability/GHSA-r6cm-wg48-rh2r"}],"summary":"Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments"}