GHSA-r76w-3wwq-jv6vHighCVSS 7.5

Insufficient Session Expiration in pretix

Published
March 7, 2023
Last Modified
October 21, 2024

🔗 CVE IDs covered (1)

CVE-2023-27891 →

📋 Description

rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1.

🎯 Affected products3

  • pip/pretix:>= 4.17.0, < 4.17.1
  • pip/pretix:>= 4.16.0, < 4.16.1
  • pip/pretix:< 4.15.1

🔗 References (4)