GHSA-jm5p-837g-rv8g

Affected versions of the Wagtail package are vulnerable to Information Disclosure due to improper restriction handling on the Page translation API endpoint. The `copy for translation` endpoint in the Admin API allows a CMS user with the "submit translations" permission to copy an existing page, even if they do not have edit access to it, thereby exposing its contents. An attacker with the appropriate permissions can exploit this vulnerability to access and view the contents of pages they are not authorized to edit, potentially leading to unauthorized information exposure.