Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Insecure direct object reference
Vulnerability Description
Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.
CVSS Information
N/A
Vulnerability Type
通过用户控制密钥绕过授权机制
Vulnerability Title
pretix 安全漏洞
Vulnerability Description
pretix是德国pretix公司的一款全程关心您活动的票务软件。 pretix存在安全漏洞，该漏洞源于多个API端点允许通过UUID访问敏感文件，可能导致未授权数据访问。
CVSS Information
N/A
Vulnerability Type
N/A