Skip to content
OpenAdvisories

Vendor

GhostManager

2 known vulnerabilities.

Products

Ghostwriter 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-78204

    Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints

    Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.test_func returns only request.user.is_active unless a view overrides it, and neither the endpoint that lints a report templat…

    GhostManager Ghostwriter