pretix-oppwa vulnerabilities
2 known vulnerabilities in pretix-oppwa from Pretix. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score
Latest first
- 7.7 High severity
We found a chain of combining multiple weaknesses in the product that could allow an attacker…
We found a chain of combining multiple weaknesses in the product that could allow an attacker to become any user in the backend and access any data: * The payment integration plugins Stripe (included in the core system), pretix-mollie, pretix-oppwa, pretix-bit
- 9.0 Critical severity
The payment integration pretix-oppwa provides support for the payment providers VR Payment…
The payment integration pretix-oppwa provides support for the payment providers VR Payment, Hobex, and potentially others based on Oppwa's technology. The integration of Oppwa, following their official documentation, includes a step where the user is redirecte