2 matches found
CVE-2026-125744
Our API endpoint for changing ticket layouts did not properly check permissions of the requesting user or API token. An attacker with read-only access to an event could use this to change the event's ticket layout...
5.1CVSS
SaveExploits0References1
PT-2026-141610
Our API endpoint for changing ticket layouts did not properly check permissions of the requesting user or API token. An attacker with read-only access to an event could use this to change the event's ticket layout...
5.1CVSS5.9AI score
SaveExploits0References2
20