Open Redirect in Pretix Venueless

CVE-2026-12863

An unvalidated redirect was contained in Venueless' social login functionality and could be exploited for phishing using trusted domains.

Vulnerability class: Open Redirect

Affected products

Weakness classification (CWE)

References