Description

Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create.

Severity (CVSS)

Base score2.3
SeverityLow
VersionCVSS 4.0
VectorCVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
Provided byCNA

Weaknesses

  • CWE-639 — CWE-639 Authorization bypass through User-Controlled key

Affected products

VendorProductVersions
pretixVenueless0.0.0 to <0a35457f

References

Authoritative sources

This page is a snapshot. For the latest enrichment and updates, view the record on CVE.org or the NVD.

Generated from the official CVE List on 26 Jun 2026 07:05 UTC.