CVE-2020-11037

2 advisories.

PyPI/wagtail CVE-2020-11037: medium 6.1

Potential Observable Timing Discrepancy in Wagtail

Action: Upgrade wagtail to 2.7.3 or later.

pip install wagtail==2.7.3

pip install wagtail==2.8.2

pip install wagtail==2.9

Affected

introduced	fixed	last affected
0	2.7.3	-
2.8rc1	2.8.2	-
2.9rc1	2.9	-

Fixed versions

2.7.3

2.8.2

2.9

Sources

osv: GHSA-jjjr-3jcw-f8v6
https://github.com/wagtail/wagtail/security/advisories/GHSA-jjjr-3jcw-f8v6
https://nvd.nist.gov/vuln/detail/CVE-2020-11037
https://github.com/wagtail/wagtail/commit/3c030490ed575bb9cd01dfb3a890477dcaeb2edf
https://github.com/wagtail/wagtail/commit/b76ab57ee859732b9cf9287d380493ab24061090
https://github.com/wagtail/wagtail/commit/ba9d424bd1ca5ce1910d3de74f5cc07214fbfb11
https://github.com/wagtail/wagtail/commit/bac3cd0a26b023e595cf2959aae7da15bb5e4340
https://github.com/pypa/advisory-database/tree/main/vulns/wagtail/PYSEC-2020-153.yaml
https://github.com/wagtail/wagtail

CVE-2020-11037 · published 2020-05-07T18:04:53Z · modified 2026-07-08T06:00:56.875033918Z · JSON

PyPI/wagtail CVE-2020-11037: unknown

In Wagtail before versions 2.7.2 and 2.8.2, a potential timing attack exists on pages or documents that have been protected with a shared password through Wagtail's "Privacy" controls. This password c