Описание
Ghost is a Node.js content management system. From 5.18.0 until 6.21.1, a discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacker to determine whether a given email address belongs to a registered member of a Ghost site. This vulnerability is fixed in 6.21.1.
EPSS
Процентиль: 11%
0.00206
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-204
Связанные уязвимости
CVSS3: 5.3
debian
около 1 месяца назад
Ghost is a Node.js content management system. From 5.18.0 until 6.21.1 ...
CVSS3: 5.3
github
4 дня назад
Ghost: Member existence leak via magic link sign-in response
EPSS
Процентиль: 11%
0.00206
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-204