Advisories · Technology
pretix venueless.
Every CVE that names pretix venueless among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Default webserver configuration with incorrect CSP
- pretix venueless
- Cross-site scripting (XSS)
- CVSS 2.3 Low
Insecure direct object reference in pretix Venueless
- pretix Venueless
- Broken access control
- CVSS 5.1 Medium
Open redirect
- pretix Venueless
- Open redirect
- CVSS 5.1 Medium
XLSX formula injection in exports
- pretix Venueless
- CWE-148
- CVSS 7.3 High
API allows deletion of users of other instance
- pretix Venueless
- CWE-653
- CVSS 7.3 High
Unauthorized access to chat contents
- pretix Venueless
- CWE-20