Skip to content
OpenAdvisories

Vendor

TryGhost

88 known vulnerabilities.

Products

Ghost 85 express-hbs 1 Ghost-CLI 1 ActivityPub 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2023-40028 Public exploit EPSS 69%

    Arbitrary file read via symlinks in Ghost

    Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host oper…

    TryGhost Ghost ghost npm