CVE-2023-3290

A BOLA vulnerability in POST /customers allows a low privileged user to create a low privileged user (customer) in the system. This results in unauthorized data manipulation.

Score

CVSS 3.1 5.0 Medium

Status

Modified - psirt@paloaltonetworks.com

Published

2024-07-09

Last modified

2024-08-02

Weaknesses

CWE-639

Affected products

• Easyappointments (Alextselegidis)
• Easyappointments (Easyappointments)

References

• https://github.com/alextselegidis/easyappointments