Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2022/01/21 11:43 p.m.20 views

Comment reply notifications sent to incorrect users

Impact When notifications for new replies in comment threads are sent, they are sent to all users who have replied or commented anywhere on the site, rather than only in the relevant threads. This means that a user could listen in to new comment replies on pages they have not had editing access t...

4.3CVSS1.3AI score0.00231EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2022/01/18 6:15 p.m.8 views

CVE-2022-21683

Wagtail is a Django based content management system focused on flexibility and user experience. When notifications for new replies in comment threads are sent, they are sent to all users who have replied or commented anywhere on the site, rather than only in the relevant threads. This means that ...

4.3CVSS0.00231EPSS
Exploits0References3
Prion
Prion
added 2022/01/18 6:15 p.m.12 views

Code injection

Wagtail is a Django based content management system focused on flexibility and user experience. When notifications for new replies in comment threads are sent, they are sent to all users who have replied or commented anywhere on the site, rather than only in the relevant threads. This means that ...

4CVSS4.5AI score0.00231EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/01/18 5:30 p.m.11 views

CVE-2022-21683 Comment reply notifications sent to incorrect users in wagtail

Wagtail is a Django based content management system focused on flexibility and user experience. When notifications for new replies in comment threads are sent, they are sent to all users who have replied or commented anywhere on the site, rather than only in the relevant threads. This means that ...

3.5CVSS4.6AI score0.00231EPSS
Exploits0References5
Rows per page
Query Builder