Veille CVE

Recherche « pretix venueless »

4 CVE

Critique 0 Élevée 0 Moyenne 3 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « pretix venueless » ✕
  1. CVE-2026-82838 6.4 Moyenne

    pretix venueless

    The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set.

  2. CVE-2026-13350 2.3 Faible

    pretix Venueless

    Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create.

  3. CVE-2026-12863 5.1 Moyenne

    pretix Venueless

    An unvalidated redirect was contained in Venueless' social login functionality and could be exploited for phishing using trusted domains.

  4. CVE-2026-12862 5.1 Moyenne

    pretix Venueless

    Untrusted user data was passed verbatim to Excel exports for administrators. This allowed formula injection which can be used to compromise the environment of the user loading the file or other data in the file.