Description
A missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific information. This information includes the number of attendees and the total revenue.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
pretix pretix
Default version status: unaffected
0.0 to < 2026.5.5affected2026.6.0 to < 2026.6.2affected2026.7.0 to < 2026.7.1affected