CVE-2018-13063 Missing authorization in n/a
Attackers can retrieve hashed passwords and salts due to missing authorization checks in Easy!Appointments.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-13063?
CVE-2018-13063 is a high-severity missing authorization vulnerability in n/a, published on 16 Mar 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts.
Weakness: CWE-862
Which versions are affected by CVE-2018-13063?
It affects 1 product.
Products include Easyappointments Easy\!appointments.
How do I fix CVE-2018-13063?
No fix has been published for CVE-2018-13063 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2018-13063 being exploited?
There is no known exploitation of CVE-2018-13063 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2025-50383 Easy!Appointments SQL injection vulnerability
- CVE-2025-29448 Easy!Appointments Denial of Service (DoS)
- CVE-2026-23622 CSRF Protection Bypass: Sensitive endpoints accept GET requests, enabling admin account takeover
- CVE-2018-13060 Security feature bypass in n/a
- CVE-2024-0698 Easy!Appointments <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Sources
Also known as GHSA-c2c7-gq2h-35w8.