wagtail@5.2.8 vulnerabilities

A Django content management system.

  • latest version

    6.4.1

  • latest non vulnerable version

  • first published

    11 years ago

  • latest version published

    2 days ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the wagtail package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Improper Handling of Insufficient Permissions or Privileges

    wagtail is an open source content management system built on Django.

    Affected versions of this package are vulnerable to Improper Handling of Insufficient Permissions or Privileges in the wagtail.contrib.settings module. An attacker with access to the admin and knowledge of the URL of the edit view for a settings model can modify settings without proper permissions.

    How to fix Improper Handling of Insufficient Permissions or Privileges?

    Upgrade wagtail to version 6.0.5, 6.1.2 or higher.

    [,6.0.5)[6.1rc1,6.1.2)