6 matches found
coderedcms (>=0.21.0, <=0.22.3), coop (>=2.13.0, <=2.15.0) +15 more potentially affected by CVE-2022-21683 via wagtail (>=2.13.5, <=2.15.0)
wagtail PYPI version =2.13.5, =0.21.0, =2.13.0, =1.0.6, =0.2.2, =0.0.3, =0.1.0, =0.1.5, =1.0.0rc2, =0.9.3, =0.1.1, =1.0.1, =0.13.1, =0.13.2 and more Source cves: CVE-2022-21683 Source advisory: GHSA-XQXM-2RPM-3889...
coderedcms (>=0.21.0, <=0.22.3), coop (>=2.13.0, <=2.15.0) +15 more potentially affected by CVE-2022-21683 via wagtail (>=2.13.5, <=2.15.0)
wagtail PYPI version =2.13.5, =0.21.0, =2.13.0, =1.0.6, =0.2.2, =0.0.3, =0.1.0, =0.1.5, =1.0.0rc2, =0.9.3, =0.1.1, =1.0.1, =0.13.1, =0.13.2 and more Source cves: CVE-2022-21683 Source advisory: OSV:GHSA-XQXM-2RPM-3889...
coderedcms (>=0.21.0, <=0.22.3), coop (>=2.13.0, <=2.15.0) +15 more potentially affected by CVE-2022-21683 via wagtail (>=2.13.5, <=2.15.0)
wagtail PYPI version =2.13.5, =0.21.0, =2.13.0, =1.0.6, =0.2.2, =0.0.3, =0.1.0, =0.1.5, =1.0.0rc2, =0.9.3, =0.1.1, =1.0.1, =0.13.1, =0.13.2 and more Source cves: CVE-2022-21683 Source advisory: OSV:PYSEC-2022-13...
CVE-2022-21683 Comment reply notifications sent to incorrect users in wagtail
Wagtail is a Django based content management system focused on flexibility and user experience. When notifications for new replies in comment threads are sent, they are sent to all users who have replied or commented anywhere on the site, rather than only in the relevant threads. This means that ...
CVE-2022-21683 Comment reply notifications sent to incorrect users in wagtail
Wagtail is a Django based content management system focused on flexibility and user experience. When notifications for new replies in comment threads are sent, they are sent to all users who have replied or commented anywhere on the site, rather than only in the relevant threads. This means that ...
CVE-2022-21683
Wagtail CVE-2022-21683 affects the notification logic for new replies in comment threads. The issue caused notifications to be sent to all users who have commented or replied anywhere on the site, rather than only to participants within the active thread. This could allow users without editing ac...