CyberRota Analysis
AI-GeneratedA missing permission check in the affected products allows low-privileged users to access sensitive information related to events, specifically the number of attendees and total revenue, despite lacking access to the event's orders. While the severity is rated low, organizations that manage events or handle sensitive data should prioritize remediation to prevent unauthorized information disclosure. This vulnerability could lead to potential data leakage and impact the confidentiality of event-related financial metrics.
Original NVD Description
A missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific information. This information includes the number of attendees and the total revenue.