Vendor
The Biletiva Ticketing Platform is vulnerable to client-side enforcement of server-side security, allowing unauthorized state manipulation via crafted client-side requests.