Lucene search
+L

168 matches found

CNNVD
CNNVD
added 2021/04/29 12:00 a.m.11 views

Ghost CMS 跨站脚本漏洞

Ghost CMS is an open source headless content management system CMS written in JavaScript from the Ghost Foundation in Singapore. Ghost CMS suffers from a cross-site scripting vulnerability that can be exploited by an attacker to gain access by having a logged-in user click on a link containing...

6.8CVSS6.3AI score0.07935EPSS
SaveExploits1References7
CNVD
CNVD
added 2020/03/23 12:00 a.m.10 views

Ghost CMS Server-Side Request Forgery Vulnerability

Ghost CMS is an open source headless content management system CMS written in JavaScript. A server-side request forgery vulnerability exists in Ghost CMS versions prior to 3.10.0, which can be exploited by an attacker to scan local or external networks or interact with internal systems...

8.1CVSS6.7AI score0.0122EPSS
SaveExploits1References1
OSV
OSV
added 2020/03/20 7:15 p.m.15 views

CVE-2020-8134

Server-side request forgery SSRF vulnerability in Ghost CMS 3.10.0 allows an attacker to scan local or external network or otherwise interact with internal systems...

8.1CVSS6.5AI score
SaveExploits0References1
NVD
NVD
added 2020/03/20 7:15 p.m.19 views

CVE-2020-8134

Server-side request forgery SSRF vulnerability in Ghost CMS 3.10.0 allows an attacker to scan local or external network or otherwise interact with internal systems...

8.1CVSS7.9AI score0.0122EPSS
SaveExploits1References1
Prion
Prion
added 2020/03/20 7:15 p.m.24 views

Server side request forgery (ssrf)

Server-side request forgery SSRF vulnerability in Ghost CMS 3.10.0 allows an attacker to scan local or external network or otherwise interact with internal systems...

5.5CVSS7.8AI score0.0122EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2020/03/20 6:26 p.m.147 views

CVE-2020-8134

CVE-2020-8134 corresponds to a Ghost CMS SSRF flaw in the code path prior to version 3.10.0. The issue allows an attacker to scan internal or external networks or interact with internal systems through server-side requests. This affects Ghost CMS deployments running versions earlier than 3.10.0; ...

8.1CVSS7.7AI score0.0122EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/03/20 6:26 p.m.24 views

CVE-2020-8134

Server-side request forgery SSRF vulnerability in Ghost CMS 3.10.0 allows an attacker to scan local or external network or otherwise interact with internal systems...

7.9AI score0.0122EPSS
SaveExploits1References1
Hacker One
Hacker One
added 2020/03/09 1:43 p.m.45 views

Node.js third-party modules: [Limited bypass of #793704] Blind SSRF in Ghost CMS

Blind SSRF vulnerability in Ghost allows for internal port scanning, or reading oembed contents from internal network...

5.5CVSS2.4AI score0.0122EPSS
SaveExploits1
Rows per page
Query Builder