Описание
Ghost is a Node.js content management system. From 5.18.0 until 6.21.1, a discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacker to determine whether a given email address belongs to a registered member of a Ghost site. This vulnerability is fixed in 6.21.1.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ghost | itp | package |
EPSS
Процентиль: 11%
0.00206
Низкий
Связанные уязвимости
CVSS3: 5.3
nvd
около 1 месяца назад
Ghost is a Node.js content management system. From 5.18.0 until 6.21.1, a discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacker to determine whether a given email address belongs to a registered member of a Ghost site. This vulnerability is fixed in 6.21.1.
CVSS3: 5.3
github
4 дня назад
Ghost: Member existence leak via magic link sign-in response
EPSS
Процентиль: 11%
0.00206
Низкий