Description
Server-side request forgery (SSRF) vulnerability in Ghost CMS < 3.10.0 allows an attacker to scan local or external network or otherwise interact with internal systems.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Ghost | Fixed Version: 3.10.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | ghost | < 3.10.0 | 3.10.0 | GHSA-q4h8-7qff-gh6c |