Description
Ghost versions before 6.62.0 contain an authentication bypass vulnerability that allows suspended staff users to reactivate their accounts through self-service password reset. Attackers with suspended staff credentials can perform password reset operations to regain active account access and restore their original privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TryGhost | Ghost | 1.0.0 – < 6.62.0 | 6.62.0 |
References
- GitHub Security Advisory (GHSA-q734-xjgc-vpj9) vendor-advisory
- VulnCheck Advisory: Ghost 1.0.0 before 6.62.0 Suspension Bypass via Password Reset third-party-advisory