ghost vulnerabilities (Bitnami)
103 vulnerabilities.
-
ghostBitnami Ghost: Authorization Issue Allowed Author Role to Delete any Post 6.5 Medium -
ghostBitnami Ghost: Stored XSS via SVG Uploads Bypassing Sanitization 7.3 High -
ghostBitnami Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses 4.0 Medium -
ghostBitnami Ghost: Server-Side Request Forgery in Bookmark Fetching 4.0 Medium -
ghostBitnami Ghost: Regular Expression Denial of Service in Content Import 4.9 Medium -
ghostBitnami Ghost: Regular Expression Denial of Service in External Media Inliner 4.9 Medium -
ghostBitnami Ghost: Stored XSS via SVG Files in Content Imports 6.8 Medium -
ghostBitnami Ghost: Stored XSS via Embed Card Previews 7.3 High -
ghostBitnami Ghost: Remote Code Execution via Bookmark Card Images 8.8 High -
ghostBitnami Ghost: Remote Code Execution via Theme Translation Files 7.2 High -
ghostBitnami Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files 8.6 High -
ghostBitnami Ghost: Path Traversal via Locale Setting 4.9 Medium -
ghostBitnami Ghost: Invite Token Disclosure in Ghost Admin API 7.5 High -
ghostBitnami Ghost 1.20.0 before 6.64.0 Path Traversal via Locale Setting 6.9 Medium -
ghostBitnami Ghost 4.39.0 before 6.64.0 Invite Token Disclosure via Admin API 7.7 High -
ghostBitnami Ghost: Password Hash Ordering Disclosure in Ghost Admin API 3.1 Low -
ghostBitnami Ghost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin API 2.3 Low -
ghostBitnami Ghost: Stored XSS via oEmbed Photo Responses 8.1 High -
ghostBitnami Ghost: Stored XSS via Bookmark Card Images 7.3 High -
ghostBitnami Ghost from 2.5.0 before 6.64.0 Stored XSS via oEmbed Photo Responses 8.6 High -
ghostBitnami Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images 8.5 High -
ghostBitnami Ghost: Editors Could Promote Staff Users to Their Own Role 4.3 Medium -
ghostBitnami Ghost 0.5.0 before 6.64.0 Privilege Escalation via Staff Role Assignment 5.3 Medium -
ghostBitnami Ghost: Stored XSS via File Uploads on Local Storage 7.3 High -
ghostBitnami Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads 8.5 High -
ghostBitnami Ghost 0.5.3 before 6.50.0 Cross-Site Scripting via ghost_head 8.6 High -
ghostBitnami Ghost 3.20.2 before 6.51.0 SSRF via image-size fetch 5.3 Medium -
ghostBitnami Ghost: Path Traversal Vulnerability in Ghost ImageSize Service 3.8 Low -
ghostBitnami Ghost: Authorization Bypass in Comments Feature 6.5 Medium -
ghostBitnami Ghost 6.14.0 before 6.27.0 Path Traversal via ImageSize 5.1 Medium -
ghostBitnami Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comments 7.1 High -
ghostBitnami Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comment Like 7.1 High -
ghostBitnami Ghost: Server-Side Request Forgery in Webhook Trigger 2.7 Low -
ghostBitnami Ghost 1.18.0 before 6.27.0 Server-Side Request Forgery via Webhook 5.1 Medium -
ghostBitnami Ghost 2.21.0 before 6.56.0 Privilege Escalation via Notifications 8.5 High -
ghostBitnami Ghost 5.19.0 before 6.57.1 Cross-Site Request Forgery 5.3 Medium -
ghostBitnami Ghost 5.125.1 before 6.57.1 Information Disclosure via Feedback 5.3 Medium -
ghostBitnami Ghost 6.20.0 before 6.57.1 Authentication Bypass via Session Handling 8.6 High -
ghostBitnami Ghost 0.5.0 before 6.23.0 Multiple Account Creation via Invite Token 5.3 Medium -
ghostBitnami Ghost 3.23.0 before 6.23.0 API Key Exposure via Admin API 5.3 Medium -
ghostBitnami Ghost 0.8.0 before 6.23.0 Information Disclosure via Setup Endpoint 6.9 Medium -
ghostBitnami Ghost 3.10.0 before 6.34.0 Session Invalidation Bypass 7.6 High -
ghostBitnami Ghost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframe 8.5 High -
ghostBitnami Ghost 2.5.0 before 6.34.0 Untrusted Script Execution via oEmbed 8.6 High -
ghostBitnami Ghost before 6.20.0 File Read via URL Encoding Bypass 6.9 Medium -
ghostBitnami Ghost 5.42.2 before 6.58.0 Password Hash Disclosure 5.3 Medium -
ghostBitnami Ghost 5.3.0 before 6.58.0 Unauthenticated Comment Read 6.9 Medium -
ghostBitnami Ghost 4.3.0 before 6.58.0 Incorrect Authorization via Staff Token 5.3 Medium -
ghostBitnami Ghost 2.10.0 before 6.63.0 Staff Enumeration via Content API 8.7 High -
ghostBitnami Ghost 4.0.0 before 6.63.0 Restricted Content Bypass 8.7 High - Show olderLoading…