Description

Server-side request forgery (SSRF) vulnerability in Ghost CMS < 3.10.0 allows an attacker to scan local or external network or otherwise interact with internal systems.

Remediation

References

https://hackerone.com/reports/793704

Related Vulnerabilities

CVE-2022-31053 Vulnerability in maven package com.clever-cloud:biscuit-java

CVE-2021-43785 Vulnerability in npm package @joeattardi/emoji-button

CVE-2023-29003 Vulnerability in npm package @sveltejs/kit

CVE-2020-7691 Vulnerability in maven package org.webjars.npm:jspdf

CVE-2020-16044 Vulnerability in maven package org.webjars.npm:electron

Severity

Critical

Classification

CWE-918 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Tags

Exploit Patch Third Party Advisory