GHSA-r76w-3wwq-jv6v

ghsaUSosv

Insufficient Session Expiration in pretix

view advisory published 2023-03-07Licence: CC-BY-4.0

rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-27891US	high7.5	0.63% (50th)	—	2023-03-06
rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.