Skip to content
OpenAdvisories

Vendor

indico

14 known vulnerabilities.

Products

indico 14
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-53640 Public exploit

    Indico vulnerable to user enumeration via API endpoint

    Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Starting in version 2.2 and prior to version 3.3.7, an endpoint used to display details of users listed in certain fields (such as ACLs) could be …

    indico indico indico PyPI