CVE-2023-45809
2 advisories.
PyPI/wagtail CVE-2023-45809: low 2.7
Wagtail vulnerable to disclosure of user names via admin bulk action views
Action: Upgrade wagtail to 4.1.9 or later.
pip install wagtail==4.1.9pip install wagtail==5.0.5pip install wagtail==5.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.9 | - |
| 4.2.0 | 5.0.5 | - |
| 5.1.0 | 5.1.3 | - |
Fixed versions
| 4.1.9 | 5.0.5 | 5.1.3 |
Sources
- osv: GHSA-fc75-58r8-rm3h
- https://github.com/wagtail/wagtail/security/advisories/GHSA-fc75-58r8-rm3h
- https://nvd.nist.gov/vuln/detail/CVE-2023-45809
- https://github.com/wagtail/wagtail/commit/0bacd29473107d9d7f5b723a15a683449679756d
- https://github.com/wagtail/wagtail/commit/2231f462c75dfe84307fb40577e8c2109a23b27e
- https://github.com/wagtail/wagtail/commit/bc96aed6ac53f998b2f4c4bf97e2d4f5fe337e5b
- https://github.com/pypa/advisory-database/tree/main/vulns/wagtail/PYSEC-2023-219.yaml
- https://github.com/wagtail/wagtail
- https://github.com/wagtail/wagtail/releases/tag/v4.1.9
- https://github.com/wagtail/wagtail/releases/tag/v5.0.5
- https://github.com/wagtail/wagtail/releases/tag/v5.1.3
CVE-2023-45809 · published · modified · JSON
PyPI/wagtail CVE-2023-45809: low 2.7
Wagtail is an open source content management system built on Django. A user with a limited-permission editor account for the Wagtail admin can make a direct URL request to the admin view that handles
Action: Upgrade wagtail to 4.1.9 or later.
pip install wagtail==4.1.9pip install wagtail==5.0.5pip install wagtail==5.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.9 | - |
| 4.2 | 5.0.5 | - |
| 5.1 | 5.1.3 | - |
Fixed versions
| 4.1.9 | 5.0.5 | 5.1.3 |
Sources
- osv: PYSEC-2023-219
- https://github.com/wagtail/wagtail/security/advisories/GHSA-fc75-58r8-rm3h
- https://github.com/wagtail/wagtail/commit/bc96aed6ac53f998b2f4c4bf97e2d4f5fe337e5b
CVE-2023-45809 · published · modified · JSON