Incorrect authorization in wagtail - #VU156670

Vulnerability details

The vulnerability allows a remote user to bypass collection access restrictions and potentially disclose sensitive documents.

The vulnerability exists due to incorrect authorization in Wagtail's collection privacy settings when handling privacy-setting changes. A remote user can use administrative interface access and the "change" permission for at least one collection to modify privacy settings for another collection outside their permitted scope, potentially removing access restrictions and exposing sensitive documents.

Affected software

Remediation

External References

• https://github.com/wagtail/wagtail/security/advisories/GHSA-jm43-45cc-q9rr

Related Security Bulletins

• Multiple vulnerabilities in wagtail