Moole Vulnerability Database

Find real vulnerabilities before they ship

Low

CVE-2025-14882

An API endpoint allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.

VectorNETWORK

PublishedDec 19, 2025, 13:16

Published By655498c3-6ec5-4f0b-aea6-853b334d05a6

Base Score

Score3.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

pretix(PyPI)2025.10.02025.10.1N/A

pretix(PyPI)2025.9.02025.9.3N/A

pretix(PyPI)02025.8.3N/A

References

https://pretix.eu/about/en/blog/20251218-release-2025-10-1/

Weakness Type

CWE-639

CVSS Metrics

Base Score

3.8

Vector String

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Base SeverityLow

Version

4.0

Attack Vector (AV)

NETWORK