wagtail@3.0.2

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Improper Handling of Insufficient Permissions or Privileges in the simple_translation process. An attacker can access and create translations for pages without the necessary permissions by leveraging the "Can submit translation" permission.

Upgrade wagtail to version 7.0.8, 7.3.3, 7.4.2 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the dynamic image URL generator view within the admin interface. An attacker with a limited-permission editor account can execute arbitrary actions with the credentials of a higher-privileged user by enticing them to visit a crafted URL. This is only exploitable if the attacker has access to the admin interface with editor permissions.

Upgrade wagtail to version 7.0.8, 7.3.3, 7.4.2 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the preview(request, image_id, filter_spec) view in wagtail/images/views/images.py. An authenticated admin can trigger expensive rendition processing by supplying crafted image filter specs in the image preview URL. The preview endpoint passes the requested filter_spec straight into Filter(spec=filter_spec).run(...), so unsupported or unbounded filter operations are processed before any restriction on allowed preview filters is applied. This can consume excessive CPU and memory during image rendition generation, degrading the admin experience and potentially slowing the site.

Notes

• The vulnerable path is the admin image preview URL, so it is only reachable by a user who can access the Wagtail admin and has permission to preview that image; ordinary site visitors are not in scope.
• The unbounded specs are accepted through the same preview syntax used by the built-in URL generator, so the affected behavior depends on deployments that expose that admin preview flow rather than any generic image-serving endpoint.

Upgrade wagtail to version 7.0.8, 7.3.3, 7.4.2 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Improper Handling of Insufficient Permissions or Privileges via the preview view in wagtail/images/views/images.py. An attacker can preview images they do not have access to by sending a preview request for an arbitrary image ID from the Wagtail admin. A user with admin access but without change permission on a specific image can reach the preview endpoint and render that image anyway, exposing the image content through the preview page.

Notes

• The vulnerable path was only exposed through the Wagtail admin preview flow; ordinary site visitors without admin access were not in scope.
• Impact is limited to preview rendering of the image, not disclosure of the image object’s stored metadata or other fields.

Upgrade wagtail to version 7.0.8, 7.3.3, 7.4.2 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Improper Handling of Insufficient Permissions or Privileges via revision comparisons. An attacker can gain unauthorized access to sensitive information by supplying the primary keys of two revisions to which they do not have edit permissions.

Upgrade wagtail to version 7.0.7, 7.3.2, 7.4 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Improper Handling of Insufficient Permissions or Privileges via the API for documents and images. A user with access to the API can access filenames and names of items in private collections by querying the API.

Upgrade wagtail to version 7.0.7, 7.3.2, 7.4 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Improper Handling of Insufficient Permissions or Privileges when viewing page history. A user without edit permissions on a given page can access the history report for that pages.

Upgrade wagtail to version 7.0.7, 7.3.2, 7.4 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Improper Handling of Insufficient Permissions or Privileges on page copy. An attacker can gain unauthorized access to restricted page content by copying pages from areas they do not have permission to access into areas where they do have access.

Upgrade wagtail to version 7.0.7, 7.3.2, 7.4 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Improper Handling of Insufficient Permissions or Privileges in the deletion of form submissions. A user can remove other users' form submissions without proper authorization by sending malicious requests.

Note: This is only exploitable if the attacker has access to the admin interface.

Upgrade wagtail to version 7.0.7, 7.3.2, 7.4 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the TableBlock class attributes. A user with access to create or edit pages containing TableBlock StreamField blocks in the admin interface can execute arbitrary JavaScript code in the context of a higher-privileged user by crafting malicious class attributes, which are rendered when the page is viewed by an authenticated user with sufficient privileges.

Upgrade wagtail to version 6.3.8, 7.0.6, 7.2.3, 7.3.1 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the wagtail.contrib.simple_translation module. A user with access to the admin area can execute arbitrary JavaScript code in the context of another user's session by creating a specially-crafted page title and having another authenticated user perform the "Translate" action in the admin interface. This may allow the attacker to perform actions with the victim's credentials.

Upgrade wagtail to version 6.3.8, 7.0.6, 7.2.3, 7.3.1 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Missing Authorization via the preview endpoints in the admin interface. An attacker can obtain unauthorized preview renderings of pages, snippets, or site settings by crafting form submissions with arbitrary data. This may expose database contents that are otherwise restricted to users with edit access.

Note: This is only exploitable if the attacker has access to the admin interface.

Upgrade wagtail to version 6.3.6, 7.0.4, 7.1.3, 7.2.2, 7.3 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) through the parse_query_string process. An attacker can cause the server to consume excessive resources and potentially crash by submitting specially crafted search queries.

Note: This is only exploitable if the site uses the default or a custom search implementation that employs parse_query_string.

Upgrade wagtail to version 5.2.6, 6.0.6, 6.1.3 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Improper Handling of Insufficient Permissions or Privileges in the wagtail.contrib.settings module. An attacker with access to the admin and knowledge of the URL of the edit view for a settings model can modify settings without proper permissions.

Upgrade wagtail to version 6.0.5, 6.1.2 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Race Condition in dispatch() in edit.py, when two processes load the edit view of a page without a subscription.

Upgrade wagtail to version 5.2rc1 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Race Condition in create_or_update_for_object() that could cause uniqueness errors when inserting reference index entries.

Upgrade wagtail to version 5.2rc1 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Direct Request ('Forced Browsing') through the admin bulk action views. An attacker can disclose user names by making a direct URL request.

Note:

This is only exploitable if the attacker has a limited-permission editor account for the Wagtail admin.

Upgrade wagtail to version 4.1.9, 5.0.5, 5.1.3 or higher.

wagtail is an open source content management system built on Django.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the ModelAdmin views within the admin interface due to improper user input sanitization. A user with a limited-permission editor account for the Wagtail admin could potentially craft pages and documents that, when viewed by a user with higher privileges, could perform actions with that user's credentials.

Note: The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin, and only affects sites with ModelAdmin enabled.

Upgrade wagtail to version 4.1.4, 4.2.2 or higher.