Threats tagged 'ghsa-jgpc-mvf3-4rpj'

A vulnerability in pretix when used as an identity provider in Single-Sign-On (SSO) setups allows improper validation of the response_type parameter. Specifically, if an SSO client is configured to only allow the 'code' response type, an attacker could request an 'id_token' response type and receive a valid token. Exploitation requires the attacker to execute JavaScript on a page specified by the redirect_uri, which must be pre-approved in the client configuration.