4 matches found
CVE-2026-103291
Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbound HTTP requests to arbitrary URLs. Attackers can point image cards at attacker-controlled hosts or internal network...
EUVD-2026-90684
Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbound HTTP requests to arbitrary URLs. Attackers can point image cards at attacker-controlled hosts or internal network...
CVE-2026-103291 Ghost 3.20.2 before 6.51.0 SSRF via image-size fetch
Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbound HTTP requests to arbitrary URLs. Attackers can point image cards at attacker-controlled hosts or internal network...
CVE-2026-103291
Ghost versions from 3.20.2 before 6.51.0 are vulnerable to a server-side request forgery (SSRF) in the image dimension refetching functionality. This flaw allows authenticated staff users to trigger outbound HTTP requests to arbitrary URLs. An attacker can exploit this by pointing image cards at ...