Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2022-41654
HistoryDec 22, 2022 - 10:15 a.m.

Authentication flaw

2022-12-2210:15:00
PRIOn knowledge base
www.prio-n.com
7

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.7 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

12.9%

JSON

An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability.

CPENameOperatorVersion
ghostge4.46.0
ghostlt4.48.8
ghostge5.0.0
ghostlt5.22.7

Related

cvelist 1
osv 3
github 1
veracode 2
talos 1
cve 1
thn 1
talosblog 1
cvelist
cvelist
CVE-2022-41654
2022-12-22 00:00:00
osv
osv
BIT-ghost-2022-41654
2024-03-06 10:53:41
CVE-2022-41654
2022-12-22 10:15:10
ghost vulnerable to unauthorized newsletter modification via improper access controls
2022-11-28 22:06:24
github
github
ghost vulnerable to unauthorized newsletter modification via improper access controls
2022-11-28 22:06:24
veracode
veracode
Improper Access Control
2022-12-01 10:41:26
Privilege Escalation
2022-11-30 06:16:41
talos
talos
Ghost unauthorized newsletter modification vulnerability
2022-12-21 00:00:00
cve
cve
CVE-2022-41654
2022-12-22 10:15:00
thn
thn
Two New Security Flaws Reported in Ghost CMS Blogging Software
2022-12-22 10:09:00
talosblog
talosblog
Vulnerability Spotlight: Authentication bypass and enumeration vulnerabilities in Ghost CMS
2022-12-21 17:39:33

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.7 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

12.9%

JSON
Related for PRION:CVE-2022-41654
cvelist1osv3github1veracode2talos1cve1thn1talosblog1