Client-Side Enforcement Vulnerability in Biletiva Ticketing Platform by Divasoft Software and E-Commerce Inc.

CVE-2026-13138

What is CVE-2026-13138?

A vulnerability exists in the Biletiva Ticketing Platform by Divasoft Software and E-Commerce Inc. that allows an attacker to manipulate the state due to inadequate enforcement of server-side security policies on the client side. This weakness could potentially lead to unauthorized actions being performed by users without proper authentication or authorization, jeopardizing the integrity of the ticketing transactions. User inputs may be falsified, putting sensitive information at risk while bypassing the security measures intended to protect the platform.

References