Exploit Report

Computer Security And Bug Information


CVE Title
Published Date2023-03-05T22:15Z
Modified Date2023-03-09T20:58Z
CWE TypeCWE-862
DescriptionGhost 5.35.0 allows authorization bypass: contributors can view draft posts of other users, which is arguably inconsistent with a security policy in which a contributor's draft can only be read by editors until published by an editor. NOTE: the vendor's position is that this behavior has no security impact.
By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites.
Reference URLhttps://ghost.org/docs/security/
Reference DescriptionMISC https://ghost.org/docs/security/
Reference URLhttps://gist.github.com/yurahod/828d5e6a077c12f3f74c6485d1c7f0e7
Reference DescriptionMISC https://gist.github.com/yurahod/828d5e6a077c12f3f74c6485d1c7f0e7
Reference URLhttps://gist.github.com/yurahod/2e11eabbe4b92ef1d44b08e37023ecfb
Reference DescriptionMISC https://gist.github.com/yurahod/2e11eabbe4b92ef1d44b08e37023ecfb
TagsVendor Advisory

This site's data is aggregated programmatically and provided "as is" without any representations or warranties, express or implied. Exploit.report is not affiliated with the The MITRE Corporation, U.S. Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), or US government in any way. CVE and the CVE logo are registered trademarks of The MITRE Corporation

© 2022 Exploit.Report | Data | Contact | Privacy Policy | Articles