PyPI/wagtail CVE-2023-45809: low 2.7, EPSS 0.56%
Wagtail is an open source content management system built on Django. A user with a limited-permission editor account for the Wagtail admin can make a direct URL request to the admin view that handles
Action: Upgrade wagtail to 4.1.9 or later.
pip install wagtail==4.1.9pip install wagtail==5.0.5pip install wagtail==5.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.9 | - |
| 4.2 | 5.0.5 | - |
| 5.1 | 5.1.3 | - |
Fixed versions
| 4.1.9 | 5.0.5 | 5.1.3 |
Sources
- osv: PYSEC-2023-219
- https://github.com/wagtail/wagtail/security/advisories/GHSA-fc75-58r8-rm3h
- https://github.com/wagtail/wagtail/commit/bc96aed6ac53f998b2f4c4bf97e2d4f5fe337e5b
CVE-2023-45809 · published · modified · JSON