Wagtail has improper restriction handling on Documents and Images API
CVE-2026-44201
### Impact The Documents and Images [API](https://docs.wagtail.org/en/stable/advanced_topics/api/index.html) incorrectl
#cwe-280
共收录 46 条相关情报。
← 返回所有主题Wagtail has improper permission handling when deleting form submissions
CVE-2026-44199
### Impact A CMS user with limited access to form pages could delete submissions to form pages they don't have access t
Wagtail has improper permission handling when viewing page history
CVE-2026-44198
### Impact A CMS user without the ability to edit a page could still access the history report for the page, potentiall
Wagtail has improper permission handling when comparing revisions
CVE-2026-44197
### Impact A CMS user without the ability to edit a page could access revisions of the page through the revision compar
Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force ...
CVE-2026-6805
Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve inf
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already ob...
CVE-2026-20448
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local es