CVE-2024-4537: Impronta Janto Ticketing Software

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain the download URL of another user to obtain the purchased ticket.

Affected products

• Impronta Janto Ticketing Software: version 4.3r10.cks only
• Impronta Janto Ticketing System: version 4.3r10.cks only

Published 2024-05-07. Last modified 2026-06-17.