CVE-2025-14882
2 advisories.
PyPI/pretix CVE-2025-14882: low
pretix has Broken Access Control Allowing Cross-User File Access via UUID
Action: Upgrade pretix to 2025.8.3 or later.
pip install pretix==2025.10.1pip install pretix==2025.9.3pip install pretix==2025.8.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2025.10.0 | 2025.10.1 | - |
| 2025.9.0 | 2025.9.3 | - |
| 0 | 2025.8.3 | - |
Fixed versions
| 2025.10.1 | 2025.9.3 | 2025.8.3 |
Sources
- osv: GHSA-pmjj-h5jm-vxh4
- https://nvd.nist.gov/vuln/detail/CVE-2025-14882
- https://github.com/pretix/pretix/commit/4b5651862c57c6e384822d1d23292342126c479a
- https://github.com/pretix/pretix
- https://pretix.eu/about/en/blog/20251219-release-2025-10-1
CVE-2025-14882 · published · modified · JSON
PyPI/pretix CVE-2025-14882: unknown
pretix has Broken Access Control Allowing Cross-User File Access via UUID
Action: Upgrade pretix to 2025.8.3 or later.
pip install pretix==2025.8.3pip install pretix==2025.9.3pip install pretix==2025.10.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2025.8.3 | - |
| 2025.9.0 | 2025.9.3 | - |
| 2025.10.0 | 2025.10.1 | - |
Fixed versions
| 2025.8.3 | 2025.9.3 | 2025.10.1 |
Sources
- osv: PYSEC-2026-1802
- https://nvd.nist.gov/vuln/detail/CVE-2025-14882
- https://github.com/pretix/pretix/commit/4b5651862c57c6e384822d1d23292342126c479a
- https://github.com/pretix/pretix
- https://pretix.eu/about/en/blog/20251219-release-2025-10-1
- https://pypi.org/project/pretix
- https://github.com/advisories/GHSA-pmjj-h5jm-vxh4
CVE-2025-14882 · published · modified · JSON