01 Record

CVE-2026-54624

django CMS: Structure endpoint bypasses page-view permission

MediumPUBLISHEDCNA: GitHub_M

Base score6.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

02 Description

django CMS: Structure endpoint bypasses page-view permission

Published

2026-08-20 18:04Z1 DAY AGO

Last updated

2026-08-20 19:46Z1 DAY AGO

Reserved

2026-06-15

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

Medium (CVSS 6.5)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses

SSVC decision

ExploitationnoneAutomatablenoTechnical Impactpartial

Data version

5.2

Document digest

a6adbee069d4e620c0b62c1cb504c089c5e4e4d78150be369ab1567bae7b91e2

VendorProductVersionsPlatforms

django-cmsdjango-cms< 5.0.8—