CVE-2022-0482
Published: April 11, 2026
Official Description
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3.
Risk Analysis
This vulnerability in the alextselegidis/easyappointments GitHub repository allows for the exposure of private personal information to unauthorized actors. This could lead to sensitive data breaches. Its inclusion in the CISA KEV catalog indicates that this flaw is actively being exploited.
This vulnerability is actively being exploited in the wild. The specific exploitation vector is not detailed, but it involves unauthorized access to private information.
Users of the alextselegidis/easyappointments project should update to version 1.4.3 or later to prevent the exposure of private personal information. Review access controls and data handling practices.
Technical Analysis
CVE-2022-0482 requires local access, meaning attackers must already have a foothold on the target system.
Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.
CISA has added CVE-2022-0482 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.
Affected Vendors & Products
Exploit & PoC Resources
Quick Facts
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2022-0482 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts
- !CISA KEV: Federal agencies must patch per BOD 22-01 timeline
- !Active exploitation confirmed — treat as P1