OX App Suite before backend 7.10.6-rev37 allows authenticated users to change the appointments of arbitrary users via conflicting ID numbers, aka "ID confusion."
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-24599.json"