CVE-2026-48077— OpenReception 授权缺失致获取完整预约记录漏洞
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2026-48077 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
OpenReception: GET appointment by ID returns full appointment record without authorization
来源: CVE Program / CVE List V5
Vulnerability Description
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.1.0, the GET handler at `/api/tenants/{id}/appointments/{appointmentId}` performs no authorization check before returning the appointment record. Any party who knows or obtains a valid appointment UUID receives the full row, including channel and agent IDs, time and timezone, status, and the AES-GCM ciphertext components (`encryptedPayload`, `iv`, `authTag`, `dataKey`). The same file's DELETE handler calls `checkPermission(locals, tenantId, true)` before allowing deletion. The intent is clear: appointment records are tenant-scoped and require authentication to access. The GET handler is missing the equivalent call. The middleware chain (`apiAuthHandle`, `authGuard`) does not compensate: API paths bypass `authGuard` entirely, and `apiAuthHandle` does not block requests to non-admin paths when no token is present. Version 1.1.0 patches the issue.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
来源: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
来源: CVE Program / CVE List V5
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| open-reception | appointment-booking-software | < 1.1.0 | - |
二、漏洞 CVE-2026-48077 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-48077 的情报信息
请登录查看更多情报信息。
CVE-2026-48077 补丁与修复 (1)
CVE-2026-48077 厂商安全公告 (1)
同批安全公告 · open-reception · 2026-08-06 · 共 16 条
| CVE-2026-48086 | 9.9 CRITICAL | OpenReception 租户管理员越权升级为全局管理员 |
| CVE-2026-48087 | 9.8 CRITICAL | OpenReception WebAuthn主密钥注入致账户接管漏洞 |
| CVE-2026-48085 | 9.8 CRITICAL | OpenReception 未授权管理员账户创建漏洞 |
| CVE-2026-48088 | 9.4 CRITICAL | OpenReception 未授权员工加密投毒破坏E2E收件人目录漏洞 |
| CVE-2026-48081 | 8.1 HIGH | OpenReception 存储型点击触发 XSS 漏洞 |
| CVE-2026-48080 | 8.0 HIGH | OpenReception租户详情接口泄露PostgreSQL连接字符串 |
| CVE-2026-48084 | 7.4 HIGH | OpenReception 口令登录尝试未限制速率 |
| CVE-2026-48079 | 7.4 HIGH | OpenReception 登出页本地token清除导致未撤销token仍有效 |
| CVE-2026-48076 | 6.5 MEDIUM | OpenReception 预订流程未授权访问漏洞 |
| CVE-2026-48083 | 6.5 MEDIUM | OpenReception日志接口CRLF注入漏洞 |
| CVE-2026-48075 | 6.5 MEDIUM | OpenReception 未授权 appointments 注入漏洞 |
| CVE-2026-48071 | 5.8 MEDIUM | OpenReception 客户端 PIN 挑战基于 emailHash，导致跨租户锁定漏洞 |
| CVE-2026-48078 | 5.3 MEDIUM | OpenReception 未授权访问导致频道信息泄露漏洞 |
| CVE-2026-48082 | 3.7 LOW | OpenReception 硬编码PoW难度导致滥用率放大漏洞 |
| CVE-2026-48074 | 2.7 LOW | OpenReception 员工删除误删跨租户待处理邀请 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-48077
暂无评论