Vulnerabilities

TI-2025-00942 CVE-2025-1108 · GHSA-7gpw-jmcm-r9vh

Insufficient data authenticity vulnerability in Janto

LOW 39

Insufficient data authenticity verification vulnerability in Janto, versions prior to r12.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00211 Published 2025-02-07 Fixed in r12 CWE-345

TI-2025-00941 CVE-2025-1107 · GHSA-24xj-r6rg-2w25

MEDIUM 49

Unverified password change vulnerability in Janto, versions prior to r12.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.00414 Published 2025-02-07 Fixed in r12 CWE-620

TI-2024-04225 CVE-2024-4538 · GHSA-rc5f-cjwc-8xx6

MEDIUM 40

IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0054 Published 2024-05-07 No fix listed CWE-639

TI-2024-04224 CVE-2024-4537 · GHSA-2xjr-fp46-9fhh

MEDIUM 40

IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00661 Published 2024-05-07 No fix listed CWE-639