CVE Intelligence

Vulnerabilidades do Pretix Pretix-offlinesales

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Pretix Pretix-offlinesales: 1 registro(s), com versões afetadas e correções.

CVE-2025-14882 Baixa · 3.8 CWE-639 19/12/2025
Insecure direct object reference
An API endpoint allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.