Impronta vulnerabilities
We track 4 vulnerabilities in Impronta products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on February 7, 2025.
Latest Impronta vulnerabilities
- 8.6 High severity
Janto: Insufficient Verification of Data Authenticity
Insufficient data authenticity verification vulnerability in Janto, versions prior to r12. This allows an unauthenticated attacker to modify the content of emails sent to reset the password. To exploit the vulnerability, the attacker must create a POST request
- 9.9 Critical severity
Janto: Unverified Password Change
Unverified password change vulnerability in Janto, versions prior to r12. This could allow an unauthenticated attacker to change another user's password without knowing their current password. To exploit the vulnerability, the attacker must create a specific P
- 7.5 High severity
Janto Ticketing Software: Authorization Bypass Through User-Controlled Key
IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain a user's event ticket by creating a specific request with the ticket reference ID, leading to the exposure of sensitive user data.
- 7.5 High severity
Janto Ticketing Software: Authorization Bypass Through User-Controlled Key
IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain the download URL of another user to obtain the purchased ticket.