Skip to content
Threat Feed
Subscribe

Tag

Cve-2023-40028

1 brief RSS
medium threat

Arbitrary File Read in Ghost CMS via CVE-2023-40028

Ghost CMS versions prior to 5.59.1 are vulnerable to an authenticated arbitrary file read, exploitable through malicious symbolic link uploads via the administrative API.

exploited Ghost CMS ghost-cms arbitrary-file-read web-application cve-2023-40028 vulnerability
1r 1t 1c