Wagtail Improper Permission Handling in Page History Access Vulnerability

A vulnerability exists in Wagtail versions prior to 7.0.7, 7.3.2, and 7.4, allowing CMS users without editing rights to access the history report of a page. This could lead to the unintentional disclosure of sensitive information.

Impact

Exploitation of this vulnerability could result in unauthorized access to page history, potentially disclosing sensitive information.

Remediation

Users can upgrade to Wagtail versions 7.0.7, 7.3.2, or 7.4 to address this vulnerability. For more information, Wagtail's support channels or the security email contact can be used.