Skip to content
OpenAdvisories

Vendor

fossasia

4 known vulnerabilities.

Products

open-event-server 2 eventyay-exhibition 1 susi_server 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.1
    CVE-2026-122325

    eventyay-exhibition through commit f68888e Cross-Event Attendee Data Disclosure via Lead Creation API

    fossasia eventyay-exhibition through commit f68888e contains an authorization bypass vulnerability in the exhibitor lead creation API that allows exhibitors to access other organizers' attendee data. Exhibitors with lead scanning enabled can submit another ev…

    fossasia eventyay-exhibition
  • Low 3.7
    CVE-2025-5323

    fossasia open-event-server Mail Verification mail.py send_email_change_user_email reliance on obfuscation or encryption of security-relevant inputs without integrity checking

    A vulnerability, which was classified as problematic, has been found in fossasia open-event-server 1.19.1. This issue affects the function send_email_change_user_email of the file /fossasia/open-event-server/blob/development/app/api/helpers/mail.py of the com…

    fossasia open-event-server