Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Attendize Clear all filters
TI-2026-50806 CVE-2026-72547 · GHSA-pm9m-4jvw-f3q5

Attendize Attendize - Insecure Direct Object Reference

Priority LOW 31

An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event organiser to bulk import attendees into events belonging to other accounts via the postImportAttendee e…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00278 Published 2026-08-11 No fix listed CWE-639
TI-2026-50805 CVE-2026-72546 · GHSA-rvg3-vfj6-mf9f

Attendize Attendize - Insecure Direct Object Reference

Priority LOW 31

An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event organiser to inject attendees and orders into events belonging to other accounts via the postInviteAtte…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00278 Published 2026-08-11 No fix listed CWE-639
TI-2026-50928 CVE-2026-72690 · GHSA-6c35-rp78-p585

Attendize Attendize - Cross-Tenant Authorization Bypass

Priority LOW 25

An improper authorization vulnerability in Attendize through commit 9289acb allows an authenticated remote attacker to inject persistent mandatory survey questions into another organizer's events via the POST /event/{eve…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00412 Published 2026-08-10 No fix listed CWE-639