CVE-2023-1367

HIGH 7.3EPSS 0.4%

Code Injection in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

CVSS v3.1: 3.8 LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
CVSS v3.1: 7.3 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v3.0: 6.0 MEDIUMCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L
EPSS: 0.43% chance of exploitation in the next 30 days, 36th percentile
Published: 2023-03-13
Updated: 2025-02-27

Proof-of-concept exploits (1)

https://huntr.dev/bounties/16bc74e2-1825-451f-bff7-bfdc1ea75cc2

References

Related