Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-48916

Missing Authorization vulnerability in Drupal Bookable Calendar allows Forceful Browsing.This issue affects Bookable Calendar: from 0.0.0 before 2.2.13.

Published

2025-06-13T16:15:26.790

Last Modified

2025-07-10T12:16:29.020

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-862
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application joshfabean bookable_calendar < 2.2.13 Yes
References