Vulnerabilities

TI-2023-23959 CVE-2023-44463 · GHSA-j9gq-w73w-9h6c

An issue was discovered in pretix before 2023.7.1.

LOW 31

An issue was discovered in pretix before 2023.7.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00632 Published 2023-10-02 Fixed in 2023.7.1 CWE-290

TI-2023-23960 CVE-2023-44464 · GHSA-9jvx-p6mq-fw4v

LOW 36

pretix before 2023.7.2 allows Pillow to parse EPS files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00331 Published 2023-09-29 Fixed in 2023.7.2

TI-2023-12482 CVE-2023-27891 · GHSA-r76w-3wwq-jv6v

LOW 34

rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00623 Published 2023-03-06 Fixed in 4.17.1, 4.16.1 +1 CWE-613