CVE-2025-29448

Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability.
Configurations

No configuration.

History

12 May 2025, 19:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
CWE CWE-284

08 May 2025, 18:15

Type Values Removed Values Added
Summary (en) A business logic vulnerability in Easy Appointments v1.5.1 allows attackers to cause a Denial of Service (DoS) via unspecified vectors. (en) Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability.

08 May 2025, 14:39

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad de lógica empresarial en Easy Appointments v1.5.1 permite a los atacantes provocar una denegación de servicio (DoS) a través de vectores no especificados.

07 May 2025, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-07 15:15

Updated : 2025-05-12 19:15


NVD link : CVE-2025-29448

Mitre link : CVE-2025-29448

CVE.ORG link : CVE-2025-29448


JSON object : View

Products Affected

No product.

CWE
CWE-284

Improper Access Control