CVE-2024-27447

pretix before 2024.1.1 mishandles file validation...

CVE-2024-27447

The pretix platform, in versions prior to 2024.1.1 , is vulnerable to Improper Input Validation (CWE-20). The root cause is the inadequate validation of files uploaded by users. This flaw could allow an attacker to upload malicious files and achieve arbitrary code execution . While the severity i...