CVE-2026-44201

5.3 Moyenne

Publiée le 11/05/2026 à 18:17 · Modifiée le 17/06/2026 à 12:50 · Analysée par le NVD · Source : security-advisories@github.com

Description

Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, the Documents and Images API incorrectly listed items in private collections. A user with access to the API could see the filename and name of documents and images in private collections. This vulnerability is fixed in 7.0.7, 7.3.2, and 7.4.

Traduire en français

Produits concernés

wagtail
Torchbox wagtail

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-280

Références

https://github.com/wagtail/wagtail/security/advisories/GHSA-p5gm-92h4-6pv6 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories