Wagtail is an open source content management system built on Django. Starting in version 1.5 and prior to versions 4.1.4 and 4.2.2, a stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views within the Wagtail admin interface. A user with a limited-permission editor account for the Wagtail admin could potentially craft pages and documents that, when viewed by a user with higher privileges, could perform actions with that user's credentials. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin, and only affects sites with ModelAdmin enabled. For page, the vulnerability is in the "Choose a parent page" ModelAdmin view (`ChooseParentView`), available when managing pages via ModelAdmin. For documents, the vulnerability is in the ModelAdmin Inspect view (`InspectView`) when displaying document fields. Patched versions have been released as Wagtail 4.1.4 and Wagtail 4.2.2. Site owners who are unable to upgrade to the new versions can disable or override the corresponding functionality.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Wagtail is an open source content management system built on Django. Starting in version 1.5 and prior to
    versions 4.1.4 and 4.2.2, a stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views
    within the Wagtail admin interface. A user with a limited-permission editor account for the Wagtail admin
    could potentially craft pages and documents that, when viewed by a user with higher privileges, could
    perform actions with that user's credentials. The vulnerability is not exploitable by an ordinary site
    visitor without access to the Wagtail admin, and only affects sites with ModelAdmin enabled. For page, the
    vulnerability is in the "Choose a parent page" ModelAdmin view (`ChooseParentView`), available when
    managing pages via ModelAdmin. For documents, the vulnerability is in the ModelAdmin Inspect view
    (`InspectView`) when displaying document fields. Patched versions have been released as Wagtail 4.1.4 and
    Wagtail 4.2.2. Site owners who are unable to upgrade to the new versions can disable or override the
    corresponding functionality. (CVE-2023-28836)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 17efbe19-4e72-426a-8016-2b4e001c1378 advisory.

  - Wagtail is an open source content management system built on Django. Starting in version 1.5 and prior to     versions 4.1.4 and 4.2.2, a stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views     within the Wagtail admin interface. A user with a limited-permission editor account for the Wagtail admin     could potentially craft pages and documents that, when viewed by a user with higher privileges, could     perform actions with that user's credentials. The vulnerability is not exploitable by an ordinary site     visitor without access to the Wagtail admin, and only affects sites with ModelAdmin enabled. For page, the     vulnerability is in the Choose a parent page ModelAdmin view (`ChooseParentView`), available when     managing pages via ModelAdmin. For documents, the vulnerability is in the ModelAdmin Inspect view     (`InspectView`) when displaying document fields. Patched versions have been released as Wagtail 4.1.4 and     Wagtail 4.2.2. Site owners who are unable to upgrade to the new versions can disable or override the     corresponding functionality. (CVE-2023-28836)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
410500	SCA: security update for wagtail (GHSA-5286-f2rf-35c2)	Tenable Cloud Security	SCA Checks	high
410500	SCA: security update for wagtail (GHSA-5286-f2rf-35c2)	Tenable Self-Hosted Container Security	SCA Checks	high
180366	FreeBSD : py-wagtail -- stored XSS vulnerability (17efbe19-4e72-426a-8016-2b4e001c1378)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2023-28836

high

Tenable Plugins

high

high

medium