Skip to content
OpenAdvisories

Vendor

batiste

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    django-page-cms through 2.0.13 Unauthorized Content Access via Staff Account

    django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views, allowing any staff account to read arbitrary page content and stored media paths. Attackers with low-privilege staff credentials can enumerate content identifier…