Опубликовано: 01 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3
Описание
Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings.
Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings.
Связанные уязвимости
CVSS3: 5.3
nvd
15 дней назад
Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings.
CVSS3: 5.3
debian
15 дней назад
Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access con ...