Vendor
Attendize
3 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.4
Attendize Attendize - Cross-Tenant Authorization Bypass
An improper authorization vulnerability in Attendize through commit 9289acb allows an authenticated remote attacker to inject persistent mandatory survey questions into another organizer's events via the POST /event/{event_id}/question/create endpoint. The po…