p PatchFirst

PatchFirst · Latest vulnerabilities

wagtail 7.4rc1: known vulnerabilities

The comparison for wagtail 7.4rc1 is incomplete. Review the confirmed matches below.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Could not compare 7 records. The results are incomplete.

Vulnerability: 1

  1. GHSA-jm5p-837g-rv8g

    Medium · CVSS 6.5Fix available

    Wagtail: Improper restriction handling on Page translation API endpoint

    ### Impact A CMS user with the "submit translations" permission, could use the Admin API's "copy for translation" endpoint to copy an existing page that they do not have edit access to, allowing them to view its contents. ### Patches Patched versions have been released as Wagtail 7.0.9, 7.3.4, 7.4.3 and 8.0rc2. ### Workarounds N/A ### Acknowledgements Many thanks to tinyb0y for reporting this issue. ### For more information If you have any questions or comments about this advisory: * Visit Wagtail's [support channels](https://docs.wagtail.org/en/stable/support.html) * Email us at [[email protected]](mailto:[email protected]) (view

    wagtailPython
    • Update to 7.4.3
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →