CVE-2024-27447

2024-02-2616:28:00

Google

osv.dev

pretix

file validation

security

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

pretix before 2024.1.1 mishandles file validation.

CPENameOperatorVersion
pretixeqs
pretixeq1.1.0
pretixeq2023.6.0
pretixeq3.10.0
pretixeq3.8.0
pretixeq3.2.0
pretixeq3.9.0
pretixeq4.11.0
pretixeq4.9.0
pretixeq2.0.0

Name	Operator	Version
pretix	eq	s
pretix	eq	1.1.0
pretix	eq	2023.6.0
pretix	eq	3.10.0
pretix	eq	3.8.0
pretix	eq	3.2.0
pretix	eq	3.9.0
pretix	eq	4.11.0
pretix	eq	4.9.0
pretix	eq	2.0.0

Rows per page:

1-10 of 741

References

github.com/pretix/pretix/compare/v2023.10.2...v2024.1.1