Description (CNA)
A missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific information. This information includes the number of attendees and the total revenue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| pretix / pretix | affected 0.0 before 2026.5.5; affected 2026.6.0 before 2026.6.2; affected 2026.7.0 before 2026.7.1 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.