Unauthorized access to chat contents

Description

A vulnerability marked as critical has been reported in pretix Venueless. Impacted is an unknown function of the component Chat Message Handler. This manipulation causes permission issues.

Affected Products

Vendor	Product	Versions
pretix	venueless	0.0.0, 2026.3.27.e20083a

References

https://github.com/venueless/venueless/security/advisories/GHSA-6fq7-pgj3-6cfp

Related News (1 articles)

Tier C

VulDB3h ago

CVE-2026-4982 | pretix Venueless prior 2026.3.27.e20083a Chat Message permission (GHSA-6fq7-pgj3-6cfp / EUVD-2026-16593)

→ No new info (linked only)

CISA KEV❌ No

Actively exploited✅ Yes

CWECWE-20

Published3/27/2026

Last enriched2h agov2

Trending Score50

Source articles1

Independent1

Info Completeness8/14

Missing: cvss, epss, kev, exploit, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Version History

Last enriched 2h ago

v2Tier C2h ago

Updated severity to CRITICAL, added affected version 2026.3.27.e20083a, and noted that the vulnerability is actively exploited.

descriptionseverityaffectedVersionsactivelyExploitedpatchAvailable

via VulDB

v13h ago

Initial creation