Lucene search
GoogleOSV:BIT-GHOST-2022-41654HistoryMar 06, 2024 - 10:53 a.m.
BIT-ghost-2022-41654
2024-03-0610:53:41
Google
osv.dev
6
ghost foundation
authentication bypass
newsletter subscription
http request
increased privileges
vulnerability
security
software
An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability.
Related
prion
prion
Authentication flaw
2022-12-22 10:15:00
cvelist
cvelist
CVE-2022-41654
2022-12-22 00:00:00
github
github
veracode
veracode
Improper Access Control
2022-12-01 10:41:26
Privilege Escalation
2022-11-30 06:16:41
osv
osv
CVE-2022-41654
2022-12-22 10:15:10
talos
talos
Ghost unauthorized newsletter modification vulnerability
2022-12-21 00:00:00
cve
cve
CVE-2022-41654
2022-12-22 10:15:00
thn
thn
Two New Security Flaws Reported in Ghost CMS Blogging Software
2022-12-22 10:09:00
talosblog
talosblog