Advisories · Technology
pretix.
Every CVE that names pretix among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
Incorrect session validation for API-created shredder exports
- pretix
- CVSS 6.9 Medium
Missing authentication in pretix
- pretix
- Authentication bypass
- CVSS 5.3 Medium
Giftcard enumeration
- pretix
- Broken access control
- CVSS 2.1 Low
OAuth credentials not disabled when application is disabled
- pretix
- Authentication bypass
- CVSS 2.1 Low
HTML injection
- pretix
- Cross-site scripting (XSS)
- CVSS 2.3 Low
Incorrect session validation for API-uploaded files
- pretix
- Authentication bypass
- CVSS 1.7 Low
Customer session fixation
- pretix
- Authentication bypass
- CVSS 2.7 Low
Revenue information leak
- pretix
- Broken access control
- CVSS 1.3 Low
Checkout validation bypass
- pretix
- CWE-20
- CVSS 2.3 Low
Missing authorization check in event quick setup view
- pretix
- Broken access control
- CVSS 7.7 High
Session takeover vulnerability
- pretix
- pretix-mollie
- CWE-20
- CWE-323
- CVSS 8.8 High
Cross-site scripting in pretix
- pretix
- Cross-site scripting (XSS)
- CVSS 2.1 Low
Cross-site scripting in pretix
- pretix
- Cross-site scripting (XSS)
- CVSS 2.1 Low
Cross-site scripting in pretix
- pretix
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Stored XSS in ticket confirmation page
- pretix
- Cross-site scripting (XSS)
- CVSS 3.6 Low
Data exposed without proper permission
- pretix
- CWE-280