CVE-2024-4538: Impronta Janto Ticketing Software

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain a user's event ticket by creating a specific request with the ticket reference ID, leading to the exposure of sensitive user data.

Affected products

• Impronta Janto Ticketing Software: version 4.3r10.cks only
• Impronta Janto Ticketing System: version 4.3r10 only

Published 2024-05-07. Last modified 2026-06-17.