CVE-2025-14882 in pretix-offlinesales

Sumário

de MITRE • 19/12/2025

An API endpoint allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsável: Rami.io
• Reservar: 18/12/2025
• Divulgação: 19/12/2025
• Moderação: aceite
• Entrada: VDB-337615
• CPE: pronto
• CWE: CWE-639 (confirmado)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00215
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-14882
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-14882
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-14882/