Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v575-g66p-vj84

Опубликовано: 01 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3

Описание

Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files.

Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files.

EPSS

Процентиль: 12%
0.00226
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-173

Связанные уязвимости

CVSS3: 5.3
nvd
2 дня назад

Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files.

CVSS3: 5.3
debian
2 дня назад

Ghost versions before 6.20.0 contain a file extension filtering bypass ...

EPSS

Процентиль: 12%
0.00226
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-173