CVE-2026-125744
2026-11-10
13h18 +00:00
13h18 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Our API endpoint for changing ticket layouts did not properly check permissions of the requesting user or API token. An attacker with read-only access to an event could use this to change the event's ticket layout.
