CVE-2023-1647

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-1647
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1647.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-1647
Published
2023-03-27T00:00:00Z
Modified
2026-10-21T02:49:24Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Improper Access Control in calcom/cal.com
Details

Improper Access Control in GitHub repository calcom/cal.com prior to 2.7.

Database specific 
{
    "cna_assigner":  "@huntrdev",
    "cwe_ids":  [
        "CWE-284"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1647.json"
}
References

Affected packages

Git / github.com/calcom/cal.diy

Affected ranges

Type
GIT
Repo
https://github.com/calcom/cal.diy
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
96308cd6076a9b510c820051b891b7885152192d
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:cal:cal.com:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "2.7.0"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}
Type
GIT
Repo
https://github.com/sbs20/scanservjs
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
fd19f99b4db00c695ad09a5568dd584f85f85f4a
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "2.7"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "SplitRange"
        }
    ]
}

Affected versions

V1.*
V1.5
V1.5.3
v.*
v.1.5.4
v.1.6.2
v.2.5.1
v.2.5.2
v.2.5.4
v0.*
v0.1.0
v0.1.1
v0.1.2
v0.1.3
v0.2.0
v0.2.1
v1.*
v1.0
v1.0.1.beta.2
v1.0.1.gold
v1.0.2
v1.0.3
v1.1
v1.2
v1.3
v1.4
v1.6
v1.6.1
v1.6.2
v1.6.3
v1.7.0
v1.7.1
v1.7.2
v1.7.3
v1.7.4
v1.7.5
v1.7.6
v1.7.7
v1.8.0
v1.8.1
v1.8.2
v1.8.3
v1.8.4
v1.8.5
v1.9.0
v1.9.1
v1.9.2
v1.9.3
v1.9.4
v1.9.5
v2.*
v2.0.0
v2.0.1
v2.0.2
v2.0.3
v2.0.4
v2.0.5
v2.1.0
v2.1.1
v2.1.2
v2.1.3
v2.1.4
v2.1.5
v2.2.0
v2.2.1
v2.2.2
v2.3.0
v2.3.1
v2.3.2
v2.3.3
v2.3.4
v2.3.5
v2.3.6
v2.3.7
v2.3.8
v2.4.0
v2.4.1
v2.4.2
v2.4.3
v2.4.4
v2.4.6
v2.4.7
v2.5.0
v2.5.10
v2.5.11
v2.5.12
v2.5.13
v2.5.14
v2.5.15
v2.5.3
v2.5.5
v2.5.6
v2.5.7
v2.5.8
v2.5.9
v2.6.0
v2.6.1
v2.6.10
v2.6.11
v2.6.12
v2.6.2
v2.6.3
v2.6.4
v2.6.5
v2.6.6
v2.6.7
v2.6.8
v2.6.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1647.json"