This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-11764 | BDVDB-2026-338792 Detail

pretixpretix

Description#

When creating an export of all reusable media, the secrets of connected gift cards were included in the export even if the user creating the export does not have permission to view gift cards. This is inconsistent with the UI and API where only the first letters of the gift card secret are shown. Therefore, it allows circumventing a permission boundary.

Impact#

Per CVSS v4.0: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-280 Improper handling of insufficient permissions or privileges

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.