Skip to content
OpenAdvisories

Package · PyPI

indico

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-53640 Public exploit

    Indico vulnerable to user enumeration via API endpoint

    Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Starting in version 2.2 and prior to version 3.3.7, an endpoint used to display details of users listed in certain fields (such as ACLs) could be …

    indico indico indico PyPI
  • None 0.0
    CVE-2024-50633 Public exploit

    Indico Insecure Access

    A Broken Object Level Authorization (BOLA) vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted POST request to the component /api/principals. NOTE: this is disputed by the Supplier because the product intentionally …

    CERN Indico indico PyPI