Executive brief
pretix before 2024.1.1 mishandles file validation.
Affected products
- PyPI pretix
Junglewise Threat Intelligence
CVE-2024-27447: PYSEC-2024-253 - pretix before 2024.1.1 mishandles file validation.
CVE-2024-27447 · Severity: info · Published 2024-02-26
Technologies: pretix (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1803 - pretix has Broken Access Control Allowing Cross-User File Access via UUID
- PYSEC-2026-1802 - pretix has Broken Access Control Allowing Cross-User File Access via UUID
- PYSEC-2026-1801 - pretix allows Pillow to parse EPS files
- rami.io pretix authorization bypass in API export endpoint
- rami.io pretix data isolation breach in check-in API