CVE-2023-45809

LOW EPSS 36.1%
Published Oct 19, 20232y ago · Modified Jun 17, 20262w ago
2.7 CVSS 3.1
Low
Find Similar
Published Oct 19, 2023 2y ago
Last Modified Jun 17, 2026 2w ago

Description

Wagtail is an open source content management system built on Django. A user with a limited-permission editor account for the Wagtail admin can make a direct URL request to the admin view that handles bulk actions on user accounts. While authentication rules prevent the user from making any changes, the error message discloses the display names of user accounts, and by modifying URL parameters, the user can retrieve the display name for any user. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. Patched versions have been released as Wagtail 4.1.8 (LTS), 5.0.5 and 5.1.3. The fix is also included in Release Candidate 1 of the forthcoming Wagtail 5.2 release. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS Details

Base Score
2.7
Exploitability
1.2
Impact
1.4
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required High
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity None
Availability None

Threat Intelligence

EPSS Exploit Probability
36.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 3

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor Information Exposure
CWE-425
CWE-532

Affected Products 3

VendorProductVersionRange
torchboxwagtail* <4.1.9
torchboxwagtail*≥4.2  –  <5.0.5
torchboxwagtail*≥5.1  –  <5.1.3

References 2

  • github.com https://github.com/wagtail/wagtail/commit/bc96aed6ac53f998b2f4c4bf97e2d4f5fe337e5b
    Patch
  • github.com https://github.com/wagtail/wagtail/security/advisories/GHSA-fc75-58r8-rm3h
    Vendor Advisory

Remediation

  • github.com https://github.com/wagtail/wagtail/commit/bc96aed6ac53f998b2f4c4bf97e2d4f5fe337e5b
    Patch