Exposição de Wagtail

CMS
26
score de exposição
6.290
sites usam
0
em exploração
0
críticos
Análise Vexday

O histórico de vulnerabilidades do Wagtail reúne 20 CVEs catalogadas, sem registros de exploração ativa no catálogo CISA KEV e sem ocorrências de severidade crítica, situação que coloca a tecnologia abaixo da média geral do catálogo em termos de taxa de exploração. O tipo de falha mais comum é CWE-280 (tratamento inadequado de permissões insuficientes), o que sugere atenção aos controles de autorização na implementação e configuração da plataforma. A CVE mais perigosa atualmente identificada é CVE-2020-11001, com EPSS de 0,0127, indicando probabilidade de exploração ainda baixa, mas que não deve ser ignorada em ambientes expostos. O surgimento de 5 novas CVEs nos últimos 90 dias merece monitoramento contínuo, pois aponta atividade recente na descoberta de falhas mesmo em um projeto com volume total moderado de vulnerabilidades.

CVEs

26 resultados
CVE-2020-11001MEDIUMPossible XSS attack in WagtailEPSS 1.3%CVE-2021-32681MEDIUMImproper escaping of HTML ('Cross-site Scripting') in Wagtail StreamField blocksEPSS 1.1%CVE-2020-15118MEDIUMCross-Site Scripting in WagtailEPSS 1.1%CVE-2023-28837MEDIUMWagtail vulnerable to denial-of-service via memory exhaustion when uploading large filesEPSS 1.1%CVE-2022-21683LOWComment reply notifications sent to incorrect users in wagtailEPSS 1.0%CVE-2023-28836MEDIUMWagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin viewsEPSS 0.8%CVE-2021-29434MEDIUMImproper validation of URLs ('Cross-site Scripting') in Wagtail rich text fieldsEPSS 0.6%CVE-2024-39317MEDIUMWagtail regular expression denial-of-service via search query parsingEPSS 0.6%CVE-2024-32882LOWPermission check bypass when editing a model with per-field restrictions in wagtailEPSS 0.5%CVE-2026-28223MEDIUMWagtail: Improper escaping of HTML (Cross-site Scripting) in simple_translation admin interfaceEPSS 0.5%CVE-2023-45809LOWDisclosure of user names via admin bulk action views in wagtailEPSS 0.5%CVE-2026-28222MEDIUMWagtail: Improper escaping of HTML (Cross-site Scripting) on TableBlock class attributesEPSS 0.4%CVE-2026-54260MEDIUMWagtail: Denial of service via unbounded filter specs in the image previewEPSS 0.4%CVE-2026-25517MEDIUMWagtail has improper permission handling on admin preview endpointsEPSS 0.4%CVE-2026-54261MEDIUMWagtail: Improper permission handling in image previewEPSS 0.3%CVE-2024-35228MEDIUMImproper Handling of Insufficient Permissions in WagtailEPSS 0.3%CVE-2026-54262MEDIUMWagtail: Pages translations can be created without page permissions when using simple_translationEPSS 0.3%CVE-2026-54259MEDIUMWagtail: Improper restriction handling on Documents and Images chosen endpointsEPSS 0.3%CVE-2026-44201MEDIUMWagtail: Improper restriction handling on Documents and Images APIEPSS 0.3%CVE-2020-11037MEDIUMPotential Observable Timing Discrepancy in WagtailEPSS 0.3%