Lucene search
+L

3 matches found

OSV
OSV
•added 2024/05/02 6:52 a.m.•38 views

CVE-2024-32882 Permission check bypass when editing a model with per-field restrictions in wagtail

Wagtail is an open source content management system built on Django. In affected versions if a model has been made available for editing through the wagtail.contrib.settings module or ModelViewSet, and the permission argument on FieldPanel has been used to further restrict access to one or more...

2.7CVSS4.4AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2024/05/02 6:52 a.m.•15 views

CVE-2024-32882 Permission check bypass when editing a model with per-field restrictions in wagtail

Wagtail is an open source content management system built on Django. In affected versions if a model has been made available for editing through the wagtail.contrib.settings module or ModelViewSet, and the permission argument on FieldPanel has been used to further restrict access to one or more...

2.7CVSS3.7AI score0.00483EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/02 12:00 a.m.•2 views

CVE-2024-32882: Improper Handling of Insufficient Permissions or Privileges

Wagtail is an open source content management system built on Django. In affected versions if a model has been made available for editing through the wagtail.contrib.settings module or ModelViewSet, and the permission argument on FieldPanel has been used to further restrict access to one or more...

2.7CVSS5.5AI score0.00483EPSS
SaveExploits0References1
Rows per page
Query Builder