cal.com vulnerabilities
2 known vulnerabilities in cal.com from Calcom. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
cal.com: Client-Side Enforcement of Server-Side Security
Cal.com is open-source scheduling software. From 3.1.6 to before 6.0.7, there is a vulnerability in a custom NextAuth JWT callback that allows attackers to gain full authenticated access to any user's account by supplying a target email address via session.upd
- 9.8 Critical severity
cal.com: Incorrect Implementation of Authentication Algorithm
Cal.com is open-source scheduling software. Prior to 5.9.8, A flaw in the login credentials provider allows an attacker to bypass password verification when a TOTP code is provided, potentially gaining unauthorized access to user accounts. This issue exists du