pretix has Broken Access Control Allowing Cross-User File Access via UUID

Description

References

• nvd.nist.gov/vuln/detail/CVE-2025-14881 · ADVISORY
• pretix/pretix commit 4b56518 · WEB
• pretix/pretix · PACKAGE
• pretix.eu/about/en/blog/20251219-release-2025-10-1 · WEB
• pretix.eu/about/en/blog/20251218-release-2025-10-1
• pypi.org/project/pretix · PACKAGE
• GitHub Advisory GHSA-r2h2-g46h-8mx8 · ADVISORY

pretix 的其他漏洞

• CVE-2026-9712低危 3.8When creating an export through the pretix API, API clients are returned an UUID value for their export job (a long, random string like 35…
• CVE-2026-5600中危 4.3A new API endpoint introduced in pretix 2025 that is supposed to return all check-in events of a specific event in fact returns all check-…
• CVE-2026-2415中危 5.9Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name} is used in an email templat…
• CVE-2025-14882低危 3.8An API endpoint allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible b…
• CVE-2025-13742中危 6.1Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name} is used in an email template…