377 matches found
GHSA-4QVV-G3VR-M348 Wagtail has improper permission handling on admin preview endpoints
Impact Due to a missing permission check on the preview endpoints, a user with access to the Wagtail admin and knowledge of a model's fields can craft a form submission to obtain a preview rendering of any page, snippet or site setting object for which previews are enabled, consisting of any data...
PT-2026-6307
Name of the Vulnerable Software and Affected Versions Wagtail versions prior to 6.3.6 Wagtail versions prior to 7.0.4 Wagtail versions prior to 7.1.3 Wagtail versions prior to 7.2.2 Wagtail versions prior to 7.3 Description Wagtail, an open source content management system built on Django, contai...
CVE-2023-45809
Wagtail is an open source content management system built on Django. A user with a limited-permission editor account for the Wagtail admin can make a direct URL request to the admin view that handles bulk actions on user accounts. While authentication rules prevent the user from making any change...
CVE-2019-16766
When using wagtail-2fa before 1.3.0, if someone gains access to someone's Wagtail login credentials, they can log into the CMS and bypass the 2FA check by changing the URL. They can then add a new device and gain full access to the CMS. This problem has been patched in version 1.3.0...
EUVD-2020-0235
Malware in sbrugna...
EUVD-2019-0155
Malware in sbrugna...
EUVD-2021-0462
Malware in sbrugna...
EUVD-2020-0236
Malware in sbrugna...
EUVD-2020-0237
Malware in sbrugna...
EUVD-2020-0234
Malware in sbrugna...
EUVD-2021-0461
Malware in sbrugna...
EUVD-2022-0357
Malicious code in bioql PyPI...
EUVD-2024-0186
Malicious code in bioql PyPI...
EUVD-2023-0054
Malicious code in bioql PyPI...
EUVD-2023-0279
Malicious code in bioql PyPI...
EUVD-2024-1820
Malicious code in bioql PyPI...
EUVD-2025-13925
Malicious code in bioql PyPI...
EUVD-2023-0278
Malicious code in bioql PyPI...