4 matches found
CVE-2026-103282
Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows multiple accounts to be created from a single invite token. Attackers can exploit this race condition by submitting concurrent requests with the same invitation token to create...
CVE-2026-103282 Ghost 0.5.0 before 6.23.0 Multiple Account Creation via Invite Token
Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows multiple accounts to be created from a single invite token. Attackers can exploit this race condition by submitting concurrent requests with the same invitation token to create...
CVE-2026-103282
Ghost versions 0.5.0 before 6.23.0 are vulnerable to a concurrency issue within the staff invitation acceptance mechanism. This race condition allows an attacker to submit multiple concurrent requests using a single invitation token to create duplicate user accounts . No specific exploit code or ...
EUVD-2026-90675
Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows multiple accounts to be created from a single invite token. Attackers can exploit this race condition by submitting concurrent requests with the same invitation token to create...