An API endpoint allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| pretix(PyPI) | 2025.10.0 | 2025.10.1 | N/A |
| pretix(PyPI) | 2025.9.0 | 2025.9.3 | N/A |
| pretix(PyPI) | 0 | 2025.8.3 | N/A |
CVSS Metrics