{"action":"Upgrade wagtail to 4.1.9 or later.","affected":[{"fixed":"4.1.9","introduced":"0"},{"fixed":"5.0.5","introduced":"4.2.0"},{"fixed":"5.1.3","introduced":"5.1.0"}],"component":"wagtail","cve_ids":["CVE-2023-45809"],"ecosystem":"PyPI","epss":0.00555,"exploited":false,"fixed_versions":["4.1.9","5.0.5","5.1.3"],"ghsa_id":"GHSA-fc75-58r8-rm3h","id":"tcs_01M5KFF0S51KGC79EN9QN1XJN6","modified_at":"2024-02-16T08:23:52.693055Z","published_at":"2023-10-19T15:50:58Z","references":["https://osv.dev/vulnerability/GHSA-fc75-58r8-rm3h","https://github.com/wagtail/wagtail/security/advisories/GHSA-fc75-58r8-rm3h","https://nvd.nist.gov/vuln/detail/CVE-2023-45809","https://github.com/wagtail/wagtail/commit/0bacd29473107d9d7f5b723a15a683449679756d","https://github.com/wagtail/wagtail/commit/2231f462c75dfe84307fb40577e8c2109a23b27e","https://github.com/wagtail/wagtail/commit/bc96aed6ac53f998b2f4c4bf97e2d4f5fe337e5b","https://github.com/pypa/advisory-database/tree/main/vulns/wagtail/PYSEC-2023-219.yaml","https://github.com/wagtail/wagtail","https://github.com/wagtail/wagtail/releases/tag/v4.1.9","https://github.com/wagtail/wagtail/releases/tag/v5.0.5","https://github.com/wagtail/wagtail/releases/tag/v5.1.3"],"severity":{"label":"low","score":2.7},"sources":[{"source":"osv","source_id":"GHSA-fc75-58r8-rm3h","url":"https://osv.dev/vulnerability/GHSA-fc75-58r8-rm3h"}],"summary":"Wagtail vulnerable to disclosure of user names via admin bulk action views"}