Ghost CMS Arbitrary File Read

Ghost CMS versions prior to 5.59.1 proof of concept arbitrary file read exploit...

Exploit for Path Traversal in Ghost

CVE-2023-40028 Proof of Concept This repository contains a pr...

Design/Logic Flaw

Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host operating system. Site administrators can...