Опубликовано: 01 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3
Описание
Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings.
Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings.
Связанные уязвимости
CVSS3: 5.3
nvd
2 дня назад
Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings.
CVSS3: 5.3
debian
2 дня назад
Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access con ...