167 matches found
CVE-2023-44463
An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the application...
CVE-2023-44463
CVE-2023-44463 affects pretix versions before 2023.7.1. The issue arises from incorrect parsing of configuration files, causing the application to trust unchecked X-Forwarded-For headers even when not configured to do so. This can enable IP address spoofing by users of the application and may aff...
CVE-2023-44463
An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the application...
CVE-2023-44463
An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the application...
GHSA-9JVX-P6MQ-FW4V pretix allows Pillow to parse EPS files
pretix before 2023.7.2 allows Pillow to parse EPS files...
pretix allows Pillow to parse EPS files
pretix before 2023.7.2 allows Pillow to parse EPS files...
CVE-2023-44464
pretix before 2023.7.2 allows Pillow to parse EPS files...
CVE-2023-44464
pretix before 2023.7.2 allows Pillow to parse EPS files...
Code injection
pretix before 2023.7.2 allows Pillow to parse EPS files...
CVE-2023-44464
The CVE-2023-44464 issue affects pretix prior to 2023.7.2 where Pillow can parse EPS files, enabling an attacker-controlled EPS payload to potentially compromise the application. Affected product: pretix (ticketing system) with Pillow EPS parsing as the root cause. Reported impacts in connected s...
rami.io pretix security breach
rami.io pretix is a ticket store application for conferences, festivals, concerts, tech events, shows, exhibitions, workshops, bars, etc. from the German company rami.io. A security vulnerability exists in rami.io pretix versions prior to 2023.7.2 that stems from allowing Pillow to parse EPS file...
CVE-2023-44464
pretix before 2023.7.2 allows Pillow to parse EPS files...
CVE-2023-44464
pretix before 2023.7.2 allows Pillow to parse EPS files...
CVE-2023-44464
pretix before 2023.7.2 allows Pillow to parse EPS files...
PT-2023-29246
Name of the Vulnerable Software and Affected Versions pretix versions prior to 2023.7.2 Description The issue allows Pillow to parse EPS files. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this...
GHSA-R76W-3WWQ-JV6V Insufficient Session Expiration in pretix
rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1...
Insufficient Session Expiration in pretix
rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1...
CVE-2023-27891
rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1...
