{"schema":"threatline.record/2","record":{"id":"CVE-2026-101274","aliases":[],"summary":"When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type` requested in an authorization request again","details":"When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type` requested in an authorization request against the configured grant type of the SSO client. This means that if an SSO client was configured to only allow the `code` response type, which requires knowledge of the client secret to use and would wrongfully send a response type like `id_token`, it would receive back a valid token. Exploiting this requires the attacker to run JavaScript on the page specified by `redirect_uri`, which must be from a list specified in the client configuration.","categories":["Unclassified"],"product":"","vendor":"pretix","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101274","source_modified_at":"2026-10-28T10:31:23.485Z","fetched_at":"2026-10-28T15:55:58.673066Z","product":null,"vendor":"pretix","versions":[{"status":"affected","version":"0","lessThan":"2026.6.4","versionType":"python"},{"status":"affected","version":"2026.7.0","lessThan":"2026.7.3","versionType":"python"},{"status":"affected","version":"2026.8.0","lessThan":"2026.8.1","versionType":"python"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101274","source_modified_at":"2026-10-28T10:31:23.485Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"name":null,"ecosystem":null},"version":"2026.6.4","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101274","source_modified_at":"2026-10-28T10:31:23.485Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"name":null,"ecosystem":null},"version":"2026.7.3","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101274","source_modified_at":"2026-10-28T10:31:23.485Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"name":null,"ecosystem":null},"version":"2026.8.1","basis":"first unaffected version stated in the CVE record"}],"cvss":6.9,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T10:31:23.485Z","modified_at":"2026-10-28T10:31:23.485Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-101274","fetched_at":"2026-10-28T15:55:58.673066Z","source_modified_at":"2026-10-28T10:31:23.485Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://pretix.eu/about/en/blog/20261028-release-2026-8-1/","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-28T10:31:23.485Z","content_hash":"c8b2c634d1be199e7fe81358ca4a04faf31d98d70e1231960361769a388c45d4"}}