CVE-2023-27891

CVE-2023-27891 concerns rami.io pretix prior to version 4.17.1. The vulnerability allows OAuth application authorization from a logged-out session, exposing an unauthorized OAuth flow. Affected product: pretix (rami.io). Root cause and impact are described consistently across sources: the issue e...

rami.io pretix 代码问题漏洞

rami.io pretix is a ticket store application for conferences, festivals, concerts, tech events, shows, exhibitions, workshops, bars, etc. from the German company rami.io. A security vulnerability exists in rami.io pretix versions prior to 4.17.1. An attacker could exploit the vulnerability to...