Skip to content
OpenAdvisories

Vendor

Impronta

4 known vulnerabilities.

Products

Janto 2 Janto Ticketing Software 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2025-1108

    Insufficient data authenticity vulnerability in Janto

    Insufficient data authenticity verification vulnerability in Janto, versions prior to r12. This allows an unauthenticated attacker to modify the content of emails sent to reset the password. To exploit the vulnerability, the attacker must create a POST reques…

    Impronta Janto
  • High 7.5
    CVE-2024-4538

    IDOR vulnerability in Janto Ticketing Software

    IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain a user's event ticket by creating a specific request with the ticket reference ID, leading to the exposure of sensitive user data.

    Impronta Janto Ticketing Software
  • High 7.5
    CVE-2024-4537

    IDOR vulnerability in Janto Ticketing Software

    IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain the download URL of another user to obtain the purchased ticket.

    Impronta Janto Ticketing Software