3 matches found
CVE-2026-101267
A missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific information. This information includes the number of attendees and the total revenue...
CVE-2026-101267
A missing permission check allows low-privileged users who have access to an event, but lack access to its orders, to extract specific information. This vulnerability leads to a revenue information leak , exposing details such as the total revenue and the number of attendees . No specific softwar...
EUVD-2026-88748
A missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific information. This information includes the number of attendees and the total revenue...