Pretix Before 2024.1.1 Has File Validation Vulnerability
CVE-2024-27447

Currently unrated

Key Information:

Vendor

pretix

Status
Pretix
Vendor
CVE Published:
26 February 2024

What is CVE-2024-27447?

The Pretix Event Ticketing System suffers from a vulnerability that affects its file validation processes prior to version 2024.1.1. This flaw allows the potential for malicious files to be incorrectly validated, potentially leading to unauthorized access or manipulation. Organizations utilizing versions before 2024.1.1 should prioritize updating their systems to mitigate risks associated with this oversight.

References

https://github.com/pretix/pretix/compare/v2023.10.2...v20...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.