Skip to content
Threat Feed
Subscribe

Tag

Ghost-Cms

2 briefs RSS
medium threat

Arbitrary File Read in Ghost CMS via CVE-2023-40028

Ghost CMS versions prior to 5.59.1 are vulnerable to an authenticated arbitrary file read, exploitable through malicious symbolic link uploads via the administrative API.

exploited Ghost CMS ghost-cms arbitrary-file-read web-application cve-2023-40028 vulnerability
1r 1t 1c
high advisory

Remote Code Execution in Ghost CMS 6.19.0

Ghost CMS version 6.19.0 is susceptible to unauthenticated remote code execution via a publicly disclosed exploit.

Ghost rce webapps ghost-cms
1t