CVE-2022-0482

Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments

CVSS 9.1 CRITICALEPSS 38.1%CWE-359

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Produtos afetados

alextselegidis · alextselegidis/easyappointments

PoCs públicas encontradas — 4

githubgithub.com/Acceis/exploit-CVE-2022-0482★ 3 githubgithub.com/mija-pilkaite/CVE-2022-0482_exploit★ 1 cve_referencepacketstormsecurity.com/files/166701/Easy-Appointments-Information-Disclosure.htmlnão verificado exploitdbwww.exploit-db.com/exploits/50871não verificado

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://packetstormsecurity.com/files/166701/Easy-Appointments-Information-Disclosure.html https://github.com/alextselegidis/easyappointments/commit/44af526a6fc5e898bc1e0132b2af9eb3a9b2c466 https://huntr.dev/bounties/2fe771ef-b615-45ef-9b4d-625978042e26 https://opencirt.com/hacking/securing-easy-appointments-cve-2022-0482/