THREAT OPS › Threat News › [GHSA] GHSA-c2xx-cjmh-9q8f (medium) — Wagtail: Improper restriction handling on descendant collections in Documents and Images API
[GHSA] GHSA-c2xx-cjmh-9q8f (medium) — Wagtail: Improper restriction handling on descendant collections in Documents and Images API
GHSA-c2xx-cjmh-9q8f Severity: medium CVE: None
Wagtail: Improper restriction handling on descendant collections in Documents and Images API
### Impact
The Documents and Images API V2 incorrectly listed items in descendants of private collections, which should inherit the view restrictions defined on their ancestors. A user wit
Indicators of compromise
- https://docs.wagtail.org/en/stable/advanced_topics/api/index.htmlurl
- https://docs.wagtail.org/en/stable/advanced_topics/api/v2/configuration.html#authenticationurl
- https://docs.wagtail.org/en/stable/support.htmlurl
- security@wagtail.orgemail
Original source: https://github.com/advisories/GHSA-c2xx-cjmh-9q8f