Lucene search
+L

164 matches found

OSV
OSV
added 2026/05/27 3:33 p.m.9 views

GHSA-72P9-6VV6-GVQH pretix vulnerable to Authorization Bypass Through User-Controlled Key

When creating an export through the pretix API, API clients are returned an UUID value for their export job a long, random string like 35742818-c375-4d15-839f-d49aecce94d6. Using this UUID, the API client can then request the actual file for download. The same kind of UUID is used in other places...

7CVSS5.8AI score0.00219EPSS
SaveExploits0References3
Rows per page
Query Builder