Insufficient Session Expiration in pretix

ALTO 7.5CVE-2023-27891 · GHSA-r76w-3wwq-jv6v · PYSEC-2023-42 · Published 06/03/2023 · updated 17/06/2026

In breve

CVE-2023-27891 è una vulnerabilità ALTO (CVSS 7.5) che riguarda pretix, pretix (rami).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.63%, superiore al 50.2% delle vulnerabilità.
Correzione: aggiornare a 4.16.1, 4.17.1, 4.15.1 o successiva.

Package	Affected versions	Patched versions
pretix PyPI	`≥ 4.16.0, < 4.16.1≥ 4.17.0, < 4.17.1< 4.15.1< 4.17.1`	`4.16.14.17.14.15.1`
pretix rami	`= 4.16.0= 4.17.0≥ 1.16.0, < 4.15.1`	`4.15.1`

rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1.

NVD description

rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

≥ 4.16.0, < 4.16.1≥ 4.17.0, < 4.17.1< 4.15.1< 4.17.1

4.16.14.17.14.15.1

= 4.16.0= 4.17.0≥ 1.16.0, < 4.15.1

4.15.1

Description

rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1.

NVD description

rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1.

Altre vulnerabilità di pretix

Vedi tutto →