{"id":"GHSA-347f-rxg8-qgrv","aliases":["CVE-2023-1269"],"title":"Easy!Appointments uses hard-coded credentials","description":"Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments 1.4.3 and prior. A patch is available and anticipated to be part of version 1.5.0.","severity":"critical","score":9.8,"published":"2023-03-08T12:30:16.000Z","modified":"2023-11-08T04:11:15.624Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"alextselegidis/easyappointments","ranges":[{"events":[{"introduced":"0"},{"last_affected":"1.4.3"}],"type":"ECOSYSTEM"}],"versions":["1.1.0","1.1.0-beta.1","1.1.0-beta.2","1.1.1","1.2.0","1.2.0-alpha.1","1.2.0-beta.1","1.2.1","1.3.0","1.3.0-alpha.1","1.3.0-beta.1","1.3.0-beta.2","1.3.1","1.3.1-beta.1","1.3.2","1.3.2-beta.1","1.4.0","1.4.0-beta.1","1.4.1","1.4.2","1.4.2-beta.1","1.4.3","1.4.3-beta.1"],"fixed":[]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2023-1269","https://github.com/alextselegidis/easyappointments/commit/2731d2f17c5140c562426b857e9f5d63da5c4593","https://github.com/alextselegidis/easyappointments","https://huntr.dev/bounties/91c31eb6-024d-4ad3-88fe-f15b03fd20f5"],"sources":[{"name":"OSV","id":"GHSA-347f-rxg8-qgrv","modified":"2023-11-08T04:11:15.624433Z","url":"https://osv.dev/vulnerability/GHSA-347f-rxg8-qgrv"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8}]}