Lucene search

K
osvGoogleOSV:GHSA-FVC6-QJP7-M4G4
HistoryApr 13, 2022 - 12:00 a.m.

Arbitrary file upload in Ghost

2022-04-1300:00:24
Google
osv.dev
9
ghost
vulnerability
file upload
svg
arbitrary code

EPSS

0.005

Percentile

76.3%

An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary code via a crafted SVG file.

EPSS

0.005

Percentile

76.3%