2 matches found
EUVD-2026-16482
Open WebUI's processfilesbatch endpoint missing ownership check, allows unauthorized file overwrite...
Insecure Direct Object Reference (IDOR)
pretix is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is due to insufficient authorization checks on file UUIDs, which allows an attacker to access sensitive files of other users by manipulating or guessing valid UUID values...