A vulnerability in the payment integration with Adyen allows improper validation of payment status responses. An attacker can reuse a successful payment status from one transaction to fraudulently obtain multiple valid tickets for different payments.