{"action":"Upgrade pretix to 2025.8.3 or later.","affected":[{"fixed":"2025.10.1","introduced":"2025.10.0"},{"fixed":"2025.9.3","introduced":"2025.9.0"},{"fixed":"2025.8.3","introduced":"0"}],"component":"pretix","cve_ids":["CVE-2025-14882"],"ecosystem":"PyPI","epss":0.00248,"exploited":false,"fixed_versions":["2025.10.1","2025.9.3","2025.8.3"],"ghsa_id":"GHSA-pmjj-h5jm-vxh4","id":"tcs_01M5KFTBK9TG9T47ZSB2TCJK58","modified_at":"2026-07-07T17:57:23.753390306Z","published_at":"2025-12-19T15:31:18Z","references":["https://osv.dev/vulnerability/GHSA-pmjj-h5jm-vxh4","https://nvd.nist.gov/vuln/detail/CVE-2025-14882","https://github.com/pretix/pretix/commit/4b5651862c57c6e384822d1d23292342126c479a","https://github.com/pretix/pretix","https://pretix.eu/about/en/blog/20251219-release-2025-10-1"],"severity":{"label":"low","score":3.8},"sources":[{"source":"osv","source_id":"GHSA-pmjj-h5jm-vxh4","url":"https://osv.dev/vulnerability/GHSA-pmjj-h5jm-vxh4"},{"source":"nvd","source_id":"CVE-2025-14882","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14882"}],"summary":"pretix has Broken Access Control Allowing Cross-User File Access via UUID"}