Description
rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | pretix | >= 4.17.0, < 4.17.1 | 4.17.1 | GHSA-r76w-3wwq-jv6v |
| PyPI | pretix | >= 4.16.0, < 4.16.1 | 4.16.1 | GHSA-r76w-3wwq-jv6v |
| PyPI | pretix | < 4.15.1 | 4.15.1 | GHSA-r76w-3wwq-jv6v |
| PyPI | pretix | < 4.17.1 | 4.17.1 | PYSEC-2023-42 |