PYSEC-2026-2032 Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`

Impact Due to an improperly applied permission check in the wagtail.contrib.settings module, a user with access to the Wagtail admin and knowledge of the URL of the edit view for a settings model can access and update that setting, even when they have not been granted permission over the model. T...

Wagtail 安全漏洞

Torchbox Wagtail is an open source content management system CMS from Torchbox UK. A security vulnerability exists in Wagtail versions 6.0 through 6.0.2, which stems from a vulnerability that allows an attacker to bypass privilege checking via wagtail.contrib.settings, ModelViewSet...