Cal.diy vulnerabilities
1 known vulnerability in Cal.diy from Cal.com. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score
Latest first
- 9.6 Critical severity
Cal.diy: Authorization Bypass Through User-Controlled Key
Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user to create a webhook on any team via unvalidated teamId injection, then steal booking data, including fields like organizer/attendee emails and custom responses, a