漏洞公告

Wagtail: Improper restriction handling on Page translation API endpoint

Wagtail: Improper permission handling when copying snippets

Wagtail: Improper restriction handling on descendant collections in Documents and Images API

Wagtail: Identification of documents by SHA1 hash

Winter: Reflected XSS through the search query parameter in the backend Table widget

Winter: CSRF through AJAX handler names reachable as backend page actions

Winter: Stored XSS through cached Brand Settings and Editor Settings custom styles

Winter: ImportExportController AJAX handlers bypass granular import/export permission gate

Winter: My Account preview exposes another backend user's profile by record ID

Winter: Stored XSS through Backend List widget image columns

Fleet: ORDER BY column injection on activity list endpoints

Fleet: Unauthenticated download of in-house iOS app binaries via predictable URLs

Winter: Authenticated Twig sandbox escape in CMS SecurityPolicy (bypass of CVE-2024-54149)

Winter: Local File Inclusion through =include directives in JavaScript asset compilation

netty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding

Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets

netty-incubator-codec-ohttp: BinaryHttpParser should enforce limits for variable lengths fields

netty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary

netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash

netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages

django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff

django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)

django CMS: Stored XSS in edit-mode plugin exception rendering