WS-2020-0399

In Ghost headless CMS, versions 1.24.3 through 2.38.1 and 3.0.0 through 3.17.1 are vulnerable to Server-Side Request Forgery in the OEmbed API. An attacker with a publisher role editor, author, contributor, administrator in a blog may be able to leverage this to make arbitrary GET requests in a...

WS-2019-0602

In Ghost headless CMS, versions 2.2.3 through 2.20.0 are vulnerable to improper access control, due to sensitive information returned through a low privileged HTTP request. A privileged attacker can read private, public and session keys of only-admin actions...

WS-2016-7127

In Ghost headless CMS, versions 0.5.2 through 0.9.0 are vulnerable to Open Redirect vulnerability, which allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks...