Skip to content
OpenAdvisories

Vendor

indico

14 known vulnerabilities.

Products

indico 14
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.5
    CVE-2026-108388

    Indico legacy contribution export cache poisoning discloses restricted metadata

    Indico is a feature-rich event management system. Indico 3.3.3 through 3.3.13 incorrectly uses the ambient web-session user instead of the user supplied to Contribution.can_manage when checking inherited event contribution-management permission. A low-privile…

    indico indico