CVE-2024-27447

描述

pretix before 2024.1.1 mishandles file validation.

受影響套件(2)

• PyPI/pretixfrom 0, < 2024.1.1
• PyPI/pretixfrom 0, < 2024.1.1

參考連結(4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-27447
• PATCHhttps://github.com/pretix/pretix
• WEBhttps://github.com/pretix/pretix/compare/v2023.10.2...v2024.1.1
• WEBhttps://github.com/pypa/advisory-database/tree/main/vulns/pretix/PYSEC-2024-253.yaml