What is GHSA-hcjv-982c-5f29?

GHSA-hcjv-982c-5f29 is a security advisory published by GitHub Security Advisories with Medium severity. Easy!Appointments Denial of Service (DoS)

Which CVE IDs does GHSA-hcjv-982c-5f29 cover?

GHSA-hcjv-982c-5f29 covers the following CVE IDs: CVE-2025-29448. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-hcjv-982c-5f29?

GHSA-hcjv-982c-5f29 affects 1 product, including: composer/alextselegidis/easyappointments:\u003c= 1.5.1.

GHSA-hcjv-982c-5f29Medium

Easy!Appointments Denial of Service (DoS)

Vendor

GitHub Security Advisories

Published

May 7, 2025

Last Modified

May 8, 2025

🔗 CVE IDs covered (1)

CVE-2025-29448 →

📋 Description

Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability.

🎯 Affected products1

composer/alextselegidis/easyappointments:<= 1.5.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-29448
https://github.com/Abdullah4eb/CVE-2025-29448
https://github.com/alextselegidis/easyappointments/commit/74633b60f28bdef3cc9f905c0599cef121fee32b
https://github.com/advisories/GHSA-hcjv-982c-5f29