~ / search / GHSA-r76w-3wwq-jv6v

GHSA-r76w-3wwq-jv6v

Insufficient Session Expiration in pretix

Source: GitHub Advisory Database (reviewed) High CVE-2023-27891

Packages

EcosystemPackageAffectedFixed in
PyPI pretix >= 4.17.0, < 4.17.1 4.17.1
PyPI pretix >= 4.16.0, < 4.16.1 4.16.1
PyPI pretix < 4.15.1 4.15.1

Details

As written in the advisory (Markdown source, shown as plain text).

rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1.

References

External links from the advisory. They lead to third-party sites.