Skip to content
OpenAdvisories

Product · pretix

Venueless

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-5599

    API allows deletion of users of other instance

    A user with API access and "manage users" permission in any venueless world is able to trigger deletion of user accounts in other worlds.

    pretix Venueless
  • High 7.3
    CVE-2026-4982

    Unauthorized access to chat contents

    A user with permission "update world" in any Venueless world is able to exfiltrate chat messages from direct messages or channels in other worlds on the same server due to a bug in the reporting feature. The exploitability is limited by the fact that the atta…

    pretix Venueless