Skip to content
OpenAdvisories

Vendor

Attendize

3 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.4

    Attendize Attendize - Cross-Tenant Authorization Bypass

    An improper authorization vulnerability in Attendize through commit 9289acb allows an authenticated remote attacker to inject persistent mandatory survey questions into another organizer's events via the POST /event/{event_id}/question/create endpoint. The po…