Exposición de Wagtail

CMS
33
score de exposición
6171
sitios usan
0
en explotación
0
críticos
Análisis Vexday

O histórico de vulnerabilidades do Wagtail reúne 20 CVEs catalogadas, sem registros de exploração ativa no catálogo CISA KEV e sem ocorrências de severidade crítica, situação que coloca a tecnologia abaixo da média geral do catálogo em termos de taxa de exploração. O tipo de falha mais comum é CWE-280 (tratamento inadequado de permissões insuficientes), o que sugere atenção aos controles de autorização na implementação e configuração da plataforma. A CVE mais perigosa atualmente identificada é CVE-2020-11001, com EPSS de 0,0127, indicando probabilidade de exploração ainda baixa, mas que não deve ser ignorada em ambientes expostos. O surgimento de 5 novas CVEs nos últimos 90 dias merece monitoramento contínuo, pois aponta atividade recente na descoberta de falhas mesmo em um projeto com volume total moderado de vulnerabilidades.

CVEs

25 resultados
CVE-2020-11001MEDIUMPossible XSS attack in WagtailEPSS 1.3%CVE-2021-32681MEDIUMImproper escaping of HTML ('Cross-site Scripting') in Wagtail StreamField blocksEPSS 1.1%CVE-2020-15118MEDIUMCross-Site Scripting in WagtailEPSS 1.1%CVE-2023-28837MEDIUMWagtail vulnerable to denial-of-service via memory exhaustion when uploading large filesEPSS 1.1%CVE-2022-21683LOWComment reply notifications sent to incorrect users in wagtailEPSS 1.0%CVE-2023-28836MEDIUMWagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin viewsEPSS 0.8%CVE-2021-29434MEDIUMImproper validation of URLs ('Cross-site Scripting') in Wagtail rich text fieldsEPSS 0.6%CVE-2024-39317MEDIUMWagtail regular expression denial-of-service via search query parsingEPSS 0.6%CVE-2024-32882LOWPermission check bypass when editing a model with per-field restrictions in wagtailEPSS 0.5%CVE-2026-28223MEDIUMWagtail: Improper escaping of HTML (Cross-site Scripting) in simple_translation admin interfaceEPSS 0.5%CVE-2023-45809LOWDisclosure of user names via admin bulk action views in wagtailEPSS 0.5%CVE-2026-28222MEDIUMWagtail: Improper escaping of HTML (Cross-site Scripting) on TableBlock class attributesEPSS 0.4%CVE-2026-25517MEDIUMWagtail has improper permission handling on admin preview endpointsEPSS 0.3%CVE-2024-35228MEDIUMImproper Handling of Insufficient Permissions in WagtailEPSS 0.3%CVE-2026-44201MEDIUMWagtail: Improper restriction handling on Documents and Images APIEPSS 0.3%CVE-2020-11037MEDIUMPotential Observable Timing Discrepancy in WagtailEPSS 0.3%CVE-2026-54260MEDIUMWagtail: Denial of service via unbounded filter specs in the image previewEPSS 0.2%CVE-2026-44197MEDIUMWagtail: Improper permission handling when comparing revisionsEPSS 0.2%CVE-2026-54263HIGHWagtail: Reflected XSS in dynamic image URL generator viewEPSS 0.2%CVE-2026-44200MEDIUMWagtail: Improper permission handling when copying pagesEPSS 0.2%