Open-source package vulnerability · Composer (PHP)
CVE-2024-57602: Easy!Appointments Improper Restriction of Excessive Authentication Attempts
criticalCVSS 3.1 9.8GHSA-8fc2-fhh6-f6m5
An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file.
Published Feb 13, 2025 · Updated Mar 19, 2025
Affected packages
alextselegidis/easyappointments
- Ecosystem
- Composer (PHP)
- Affected
- <= 1.5.0
- Fixed in
- No patched version yet
- Check
composer show alextselegidis/easyappointments
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology