wagtail-liveedit (0.0.11) potentially affected by CVE-2024-35228 via wagtail (6.1.0)

wagtail PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-liveedit 0.0.11 Source cves: CVE-2024-35228 Source advisory: OSV:PYSEC-2026-2032...

cjkcms-seo (2.4.0), wagtail-liveedit (>=0.0.9, <=0.0.10) +1 more potentially affected by CVE-2024-35228 via wagtail (>=6.0.0, <=6.0.2)

wagtail PYPI version =6.0.0, =0.0.9, =0.14.0, =0.14.4 Source cves: CVE-2024-35228 Source advisory: OSV:PYSEC-2026-2032...

wagtail-liveedit (0.0.11) potentially affected by CVE-2024-35228 via wagtail (6.1.0)

wagtail PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-liveedit 0.0.11 Source cves: CVE-2024-35228 Source advisory: GHSA-XXFM-VMCF-G33F...

CVE-2024-35228 Improper Handling of Insufficient Permissions in Wagtail

Wagtail is an open source content management system built on Django. Due to an improperly applied permission check in the wagtail.contrib.settings module, a user with access to the Wagtail admin and knowledge of the URL of the edit view for a settings model can access and update that setting, eve...

CVE-2024-35228

CVE-2024-35228 affects Wagtail (Django-based CMS) via an improperly applied permission check in the wagtail.contrib.settings module. A user with access to the Wagtail admin and knowledge of the edit view URL can access and update the setting even without model permissions. The vulnerability is no...

cjkcms-seo (2.4.0), wagtail-liveedit (>=0.0.9, <=0.0.10) +1 more potentially affected by CVE-2024-35228 via wagtail (>=6.0.0, <=6.0.2)

wagtail PYPI version =6.0.0, =0.0.9, =0.14.0, =0.14.4 Source cves: CVE-2024-35228 Source advisory: MEND:CVE-2024-35228...

wagtail-liveedit (0.0.11) potentially affected by CVE-2024-35228 via wagtail (6.1.0)

wagtail PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-liveedit 0.0.11 Source cves: CVE-2024-35228 Source advisory: MEND:CVE-2024-35228...

CVE-2024-35228 Improper Handling of Insufficient Permissions in Wagtail

Wagtail is an open source content management system built on Django. Due to an improperly applied permission check in the wagtail.contrib.settings module, a user with access to the Wagtail admin and knowledge of the URL of the edit view for a settings model can access and update that setting, eve...

CVE-2024-35228 Improper Handling of Insufficient Permissions in Wagtail

Wagtail is an open source content management system built on Django. Due to an improperly applied permission check in the wagtail.contrib.settings module, a user with access to the Wagtail admin and knowledge of the URL of the edit view for a settings model can access and update that setting, eve...