Known vulnerabilities in wagtail - page 2

Vendor: Torchbox
Software: wagtail
Software CPE: cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:django:*:*
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting wagtail wagtail is affected by 30 known vulnerabilities: 7 medium, 23 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89161 - Permissions, Privileges, and Access Controls
CVE-2024-32882
CWE-264 Low
No
No
6.0.3, 6.1 06.05.2024 SB2024050621
#VU82274 - Direct Request ('Forced Browsing')
CVE-2023-45809
CWE-425 Low
No
No
4.1.9, 5.0.5, 5.1.3, 5.2 rc1 20.10.2023 SB2023102015
#VU74378 - Resource exhaustion
CVE-2023-28837
CWE-400 Low
No
No
4.1.4, 4.2.2 04.04.2023 SB2023040424
#VU74353 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28836
CWE-79 Low
No
No
4.1.4, 4.2.2 04.04.2023 SB2023040424
#VU130193 - Improper Access Control
CVE-2022-21683
CWE-284 Low
No
No
2.15.2 18.01.2022 SB2022011860
#VU54226 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32681
CWE-79 Low
No
No
2.11.8, 2.12.5, 2.13.2 18.06.2021 SB2021061813
#VU52331 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-29434
CWE-79 Low
No
No
2.11.7, 2.12.4 19.04.2021 SB2021041916
#VU31888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15118
CWE-79 Low
No
No
2.7.4, 2.9.3 27.07.2020 SB2020072732
#VU130194 - Information Exposure Through Timing Discrepancy
CVE-2020-11037
CWE-208 Low
No
No
2.7.3, 2.8.2, 2.9 04.05.2020 SB2020050450
#VU27016 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11001
CWE-79 Low
No
No
2.7.2, 2.8.1 20.04.2020 SB2020042001


Showing elements 21 - 40 out of 30