Description (CNA)
Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| pretix / pretix | affected 1.0.0 before 2025.8.0; affected 2025.8.0 before 2025.9.0; affected 2025.9.0 before 2025.10.0; affected 2025.10.0 before 2025.11.0 |
CWE
CWE-639
References
ADP enrichment
No English description supplied.
No references supplied.