Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:BIT-GHOST-2023-32235
HistoryMar 06, 2024 - 10:52 a.m.

BIT-ghost-2023-32235

2024-03-0610:52:21
Google
osv.dev
5
remote attackers
arbitrary files
active theme's folder
directory traversal
frontend
middleware

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

Low

0.888 High

EPSS

Percentile

98.7%

JSON

Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme’s folder via /assets/built%2F…%2F…%2F/ directory traversal. This occurs in frontend/web/middleware/static-theme.js.

CPENameOperatorVersion
ghostlt5.42.1

Related

nvd 1
veracode 1
cvelist 1
cve 1
osv 2
nuclei 1
prion 1
github 1
nvd
nvd
CVE-2023-32235
2023-05-05 05:15:09
veracode
veracode
Path Traversal
2023-05-18 01:55:40
cvelist
cvelist
CVE-2023-32235
2023-05-05 00:00:00
cve
cve
CVE-2023-32235
2023-05-05 05:15:09
osv
osv
Path Traversal in Ghost
2023-05-05 06:30:32
CVE-2023-32235
2023-05-05 05:15:09
nuclei
nuclei
Ghost CMS < 5.42.1 - Path Traversal
2023-05-08 06:27:57
prion
prion
Directory traversal
2023-05-05 05:15:00
github
github
Path Traversal in Ghost
2023-05-05 06:30:32

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

Low

0.888 High

EPSS

Percentile

98.7%

JSON
Related for OSV:BIT-GHOST-2023-32235
nvd1veracode1cvelist1cve1osv2nuclei1prion1github1