{"action":"Upgrade wagtail to 4.1.9 or later.","affected":[{"fixed":"4.1.9","introduced":"0"},{"fixed":"5.0.5","introduced":"4.2"},{"fixed":"5.1.3","introduced":"5.1"}],"component":"wagtail","cve_ids":["CVE-2023-45809"],"ecosystem":"PyPI","epss":0.00555,"exploited":false,"fixed_versions":["4.1.9","5.0.5","5.1.3"],"ghsa_id":"GHSA-fc75-58r8-rm3h","id":"tcs_01M5KGJYJE4H5PK93661Y5RSPY","modified_at":"2023-11-08T04:13:39.351634Z","published_at":"2023-10-19T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-219","https://github.com/wagtail/wagtail/security/advisories/GHSA-fc75-58r8-rm3h","https://github.com/wagtail/wagtail/commit/bc96aed6ac53f998b2f4c4bf97e2d4f5fe337e5b"],"severity":{"label":"low","score":2.7},"sources":[{"source":"osv","source_id":"PYSEC-2023-219","url":"https://osv.dev/vulnerability/PYSEC-2023-219"}],"summary":"Wagtail is an open source content management system built on Django. A user with a limited-permission editor account for the Wagtail admin can make a direct URL request to the admin view that handles"}