Description
Our payment integration with Mollie did not properly validate payment
status responses. An attacker could use a successful payment status
response from one payment and supply it to the system for a different
payment, gaining access to multiple valid tickets with only one payment.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| pretix | pretix-mollie | < 2.5.6 | 2.5.6 |