PyPI/pretix CVE-2023-27891: unknown, EPSS 0.63%
rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1.
Action: Upgrade pretix to 4.17.1 or later.
pip install pretix==4.17.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.17.1 | - |
Fixed versions
| 4.17.1 |
Sources
- osv: PYSEC-2023-42
- https://pretix.eu/about/en/blog/20230306-release-4171/
- https://github.com/advisories/GHSA-r76w-3wwq-jv6v
CVE-2023-27891 · published · modified · JSON