{"id":"CVE-2022-41697","aliases":["BIT-ghost-2022-41697","EUVD-2022-44882","GHSA-65hg-2rxp-4w4r"],"status":"published","title":"A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9...","description":"A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigger this vulnerability.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.20041,"percentile":0.97461,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-204"],"published":"2022-12-22T10:15:10.12Z","modified":"2026-10-28T02:30:54Z","exploits":[{"source":"nuclei","id":"CVE-2022-41697","title":"Ghost CMS - User Enumeration","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41697.yaml"}],"fixes":[{"ecosystem":"Bitnami","package":"ghost","fixed_in":["5.9.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Bitnami","package":"ghost","ranges":[{"type":"SEMVER","events":[{"introduced":"5.9.4"},{"fixed":"5.9.5"}]}]}],"products":[{"vendor":"ghost","product":"ghost"},{"vendor":"ghost foundation","product":"ghost"},{"vendor":"tryghost","product":"ghost"}],"references":[{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2022-1625","tags":["x_transferred","Exploit","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41697","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-65hg-2rxp-4w4r"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41697.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-41697","description":"A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigger this vulnerability.","status":"published","published":"2022-12-23T23:03:51.372Z","modified":"2025-04-14T18:07:42.762Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-204"],"updated_at":"2026-11-02T14:34:27.640972Z"}],"euvd":[{"id":"EUVD-2022-44882","description":"A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigger this vulnerability.","status":"published","published":"2022-12-23T23:03:51Z","modified":"2025-04-14T18:07:42Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:33.06705Z"}],"ghsa":[{"id":"GHSA-65hg-2rxp-4w4r","title":"A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9...","description":"A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigger this vulnerability.","status":"published","published":"2022-12-22T12:30:17Z","modified":"2023-01-29T05:05:25Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-204"],"updated_at":"2026-11-02T14:45:47.324105Z"}],"nvd":[{"id":"CVE-2022-41697","description":"A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigger this vulnerability.","status":"published","published":"2022-12-22T10:15:10.12Z","modified":"2026-06-17T05:03:39.31Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-204"],"updated_at":"2026-11-02T14:07:34.388163Z"}],"osv":[{"id":"CVE-2022-41697","description":"A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigger this vulnerability.","status":"published","published":"2022-12-22T10:15:10.12Z","modified":"2026-10-28T02:30:54.894776049Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-204"],"updated_at":"2026-11-02T15:44:26.860704Z"},{"id":"BIT-ghost-2022-41697","description":"A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigger this vulnerability.","status":"published","published":"2024-03-06T10:53:30.902Z","modified":"2026-09-08T08:47:32.71052407Z","updated_at":"2026-11-02T15:28:29.999658Z"}]}}