Pretix Pretix-offlinesales vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Pretix Pretix-offlinesales: 1 record(s), with affected versions and fixes.
CVE-2025-14882
Low · 3.8
CWE-639 Dec 19, 2025
Insecure direct object reference
An API endpoint allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.