What is GHSA-347f-rxg8-qgrv?

GHSA-347f-rxg8-qgrv is a security advisory published by GitHub Security Advisories with Critical severity. Easy!Appointments uses hard-coded credentials

Which CVE IDs does GHSA-347f-rxg8-qgrv cover?

GHSA-347f-rxg8-qgrv covers the following CVE IDs: CVE-2023-1269. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-347f-rxg8-qgrv?

GHSA-347f-rxg8-qgrv has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-347f-rxg8-qgrv?

GHSA-347f-rxg8-qgrv affects 1 product, including: composer/alextselegidis/easyappointments:\u003c= 1.4.3.

GHSA-347f-rxg8-qgrvCriticalCVSS 9.8

Easy!Appointments uses hard-coded credentials

Vendor

GitHub Security Advisories

Published

March 8, 2023

Last Modified

March 14, 2023

🔗 CVE IDs covered (1)

CVE-2023-1269 →

📋 Description

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments 1.4.3 and prior. A patch is available and anticipated to be part of version 1.5.0.

🎯 Affected products1

composer/alextselegidis/easyappointments:<= 1.4.3

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-1269
https://github.com/alextselegidis/easyappointments/commit/2731d2f17c5140c562426b857e9f5d63da5c4593
https://huntr.dev/bounties/91c31eb6-024d-4ad3-88fe-f15b03fd20f5
https://github.com/advisories/GHSA-347f-rxg8-qgrv