Description

The Ghost CMS is vulnerable to a path traversal vulnerability. An unauthenticated attacker can read arbitrary files within the active theme's folder.

Remediation

Upgrade to the latest version of Ghost CMS

References

Path Traversal in Ghost

Related Vulnerabilities

Apache HTTP Server Other Vulnerability (CVE-1999-1053)

Oracle Application Server Other Vulnerability (CVE-2005-2093)

PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11074)

OpenVPN AS Other Vulnerability (CVE-2006-1629)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5608)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Directory Traversal Known Vulnerabilities CWE-22 CVE-2023-32235