Description
Server-side request forgery (SSRF) vulnerability in Ghost CMS < 3.10.0 allows an attacker to scan local or external network or otherwise interact with internal systems.
Remediation
References
https://hackerone.com/reports/793704
Related Vulnerabilities
CVE-2023-29522 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-templates
CVE-2023-45827 Vulnerability in npm package @clickbar/dot-diver
CVE-2020-7690 Vulnerability in maven package org.webjars.npm:jspdf
CVE-2022-2932 Vulnerability in npm package mobiledoc-kit
CVE-2021-45851 Vulnerability in npm package @frangoteam/fuxa