Description
Our payment integration with Oppwa-based payment methods did not
properly validate payment status responses. An attacker could use a
successful payment status response from one payment and supply it to the
system for a different payment, gaining access to multiple valid
tickets with only one payment.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| pretix | pretix-oppwa | < 1.4.3 | 1.4.3 |