VYPR
← All advisories
High severity7.5NVD Advisory· Published Mar 6, 2023· Updated Jun 17, 2026

CVE-2023-27891

CVE-2023-27891

Description

rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
pretixPyPI
>= 4.17.0, < 4.17.14.17.1
pretixPyPI
>= 4.16.0, < 4.16.14.16.1
pretixPyPI
< 4.15.14.15.1

Affected products

5
  • Rami/Pretix3 versions
    cpe:2.3:a:rami:pretix:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:rami:pretix:*:*:*:*:*:*:*:*range: >=1.16.0,<4.15.1
    • cpe:2.3:a:rami:pretix:4.16.0:*:*:*:*:*:*:*
    • cpe:2.3:a:rami:pretix:4.17.0:*:*:*:*:*:*:*
  • rami.io/pretixdescription
  • ghsa-coords
    pkg:pypi/pretix
    Range: >= 4.17.0, < 4.17.1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.