1 matches found
Wagtail has improper permission handling when viewing page history
Impact A CMS user without the ability to edit a page could still access the history report for the page, potentially resulting in disclosure of sensitive information. Patches Patched versions have been released as Wagtail 7.0.7 and 7.3.2. The new 7.4 LTS feature release also incorporates this fix...
4.3CVSS5.8AI score0.00162EPSS
SaveExploits0References4Affected Software1
20