Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wm9p-jg8j-w38q

Опубликовано: 01 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 4.3

Описание

Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint that allows unauthorized staff users to access member data. Attackers with staff privileges can query the feedback endpoint to retrieve sensitive member information without proper authorization checks.

Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint that allows unauthorized staff users to access member data. Attackers with staff privileges can query the feedback endpoint to retrieve sensitive member information without proper authorization checks.

EPSS

Процентиль: 6%
0.00168
Низкий

5.3 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.3
nvd
2 дня назад

Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint that allows unauthorized staff users to access member data. Attackers with staff privileges can query the feedback endpoint to retrieve sensitive member information without proper authorization checks.

CVSS3: 4.3
debian
2 дня назад

Ghost versions from 5.125.1 before 6.57.1 contain an information discl ...

EPSS

Процентиль: 6%
0.00168
Низкий

5.3 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-863