Pretix API Sensitive File Access Vulnerability via UUID

A vulnerability exists in a Pretix API endpoint that allows users to access sensitive files belonging to other users, simply by knowing the UUID of the file. This access is granted without proper authorization, as the files were not meant to be accessible based on UUID alone.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user files.