CVE-2026-101267 — Revenue information leak
A missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific information. This information i…
Published: 2026-09-29 · CVSS: 2.7 · CVSS 4.0
A missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific information. This information includes the number of attendees and the total revenue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7