Pretix Venueless vulnerabilities
- pretix venueless Default webserver configuration with incorrect CSP 6.4 Medium
- pretix venueless Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create. 2.3 Low
- pretix venueless Open redirect 5.1 Medium
- pretix venueless XLSX formula injection in exports 5.1 Medium
- pretix venueless API allows deletion of users of other instance 7.3 High
- pretix venueless Unauthorized access to chat contents 7.3 High