Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/06/18 3:04 p.m.•26 views

Kirby: `pages.access` permission is not checked in the pages picker for parent pages

TL;DR This vulnerability affects all Kirby sites that use the pages field and where users of a particular role have no permission to access pages pages.access permission is disabled. This can be due to configuration in the user blueprints, options in the model blueprints, or a combination of both...

5.3CVSS5.5AI score0.00484EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder