A newly disclosed critical vulnerability in Cal.com, an open-source scheduling and booking platform, could allow attackers to bypass authentication and gain full access to any user account. The flaw, identified by GitHub researcher pedroccastro and tracked as GHSA-7hg4-x4pr-3hrg, affects Cal.com versions 3.1.6 through 6.0.6. The issue has been patched in version 6.0.7, with hosted Cal.com instances reportedly secured immediately after discovery. Authentication […]

The post Critical Cal.com Vulnerability Let Attackers Bypass Authentication and Hijack Any User Account appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Varshini

Source: gbHackers
Source Link: https://gbhackers.com/cal-com-authentication-bypass/