Beveiligingsadvies

CVE-2025-66489

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-03 19:44:35

Laatst bijgewerkt 2025-12-03 21:48:27

Toegewezen door GitHub_M

CVSS-score 9.9

Status PUBLISHED

Beschrijving

Cal.com is open-source scheduling software. Prior to 5.9.8, A flaw in the login credentials provider allows an attacker to bypass password verification when a TOTP code is provided, potentially gaining unauthorized access to user accounts. This issue exists due to problematic conditional logic in the authentication flow. This vulnerability is fixed in 5.9.8.

← Alle CVE's bekijken Bekijk op cve.org ↗