ghost vulnerabilities (Bitnami)
103 vulnerabilities.
ghostBitnamiGhost 5.3.0 before 6.62.0 Missing Authorization via Post Excerpts6.9 MediumghostBitnamiGhost 1.0.0 before 6.62.0 Suspension Bypass via Password Reset8.7 HighghostBitnamiGhost 0.5.0 before 6.62.0 Arbitrary Email Registration via Staff Invite5.3 MediumghostBitnamiGhost 5.2.0 before 6.62.0 Unauthenticated Stripe Checkout Account Modification7.1 HighghostBitnamiGhost: Cross-Site Scripting in Feature Image Captions4.3 MediumghostBitnamiGhost: Server-Side Request Forgery Mitigation Issue4.0 MediumghostBitnamiGhost: Session Fixation in Ghost Admin6.7 MediumghostBitnamiGhost: Theme Upload Path Traversal6.6 MediumghostBitnamiGhost: Database Backup Path Traversal5.5 MediumghostBitnamiGhost: Server-Side Request Forgery in Image Fetching4.1 MediumghostBitnamiGhost: Blind Password Hash Disclosure in Ghost Admin API4.8 MediumghostBitnamiGhost: Archived Offers can be Redeemed4.8 MediumghostBitnamiGhost: Cross-Site Scripting in Universal Import5.0 MediumghostBitnamiGhost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header6.3 MediumghostBitnamiGhost: Paid gift memberships obtainable at minimal cost via the donations feature5.3 MediumghostBitnamiGhost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header9.6 CriticalghostBitnamiGhost: Private IP filtering bypass to make server-side requests to internal services5.8 MediumghostBitnamiGhost: Server-side request forgery via DNS rebinding in external request handling4.0 MediumghostBitnamiGhost: Mobiledoc image-size fetch SSRF5.4 MediumghostBitnamiGhost: Member existence leak via magic link sign-in response5.3 MediumghostBitnamiGhost: File Upload Content-Type Spoofing5.4 MediumghostBitnamiGhost Content API filter bypass reveals private fields5.3 MediumghostBitnami@tryghost/activitypub: XSS in Ghost's ActivityPub client7.5 HighghostBitnamiGhost: Incomplete CSRF protections around OTC use7.5 HighghostBitnamiGhost Vulnerable to Remote Code Execution via Malicious Themes7.7 HighghostBitnamiGhost has a SQL Injection in its Content API9.4 CriticalghostBitnamiGhost vulnerable to XSS via malicious Portal preview links8.8 HighghostBitnamiGhost has SQL Injection in Members Activity Feed6.7 MediumghostBitnamiGhost has SSRF via External Media Inliner5.1 MediumghostBitnamiGhost has Staff Token permission bypass8.1 HighghostBitnamiGhost has Staff 2FA bypass8.1 HighghostBitnamiGhost 6.0.6 - SSRF via oEmbed Bookmark6.1 MediumghostBitnamiGhost's improper authentication allows access to member information and actions6.5 MediumghostBitnamiGhost through 5.85.1 allows remote attackers to bypass an authentication rate-limit protection...9.1 CriticalghostBitnamiGhost allows CSV Injection during member CSV export8.8 HighghostBitnamiWordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerability7.5 HighghostBitnamiGhost has possible Cross-site Scripting issue9.0 CriticalghostBitnamiCross-site Scripting in Ghost6.1 MediumghostBitnamiArbitrary file read via symlinks in Ghost4.9 MediumghostBitnamiPath Traversal in Ghost7.5 HighghostBitnamiGhost vulnerable to disclosure of private API fields7.5 HighghostBitnamiGhost 5.35.0 allows authorization bypass: contributors can view draft posts of other users, which...5.7 MediumghostBitnamiAn insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation...9.0 CriticalghostBitnamiAn insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation...9.0 CriticalghostBitnamiAn insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation...9.0 CriticalghostBitnamiAn insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation...9.0 CriticalghostBitnamiA user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9...5.3 MediumghostBitnamighost vulnerable to unauthorized newsletter modification via improper access controls9.6 CriticalghostBitnamiArbitrary file upload in Ghost9.8 CriticalghostBitnamiArbitrary file upload in Ghost9.8 Critical- Show moreLoading…