CVE-2026-70595

Ghost is a Node.js content management system. From 6.26.0 until 6.54.1, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result i...

CVE-2026-70595 Ghost: Server-Side Request Forgery Mitigation Issue

Ghost is a Node.js content management system. From 6.26.0 until 6.54.1, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result i...

CVE-2026-70595

CVE-2026-70595 affects Ghost (Node.js CMS). From version 6.26.0 through 6.54.1, an input/validation issue allowed unauthenticated users to trigger limited HTTP requests to hosts inside Ghost’s internal network (e.g., via features like Webmentions). The attack does not return response data. The vu...

CVE-2026-70595 Ghost: Server-Side Request Forgery Mitigation Issue

Ghost is a Node.js content management system. From 6.26.0 until 6.54.1, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result i...

Ghost: Server-Side Request Forgery Mitigation Issue

Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result in any response data being returned. Vulnerable versions This...

EUVD-2017-11171

Malware in sbrugna...

CVE-2017-20174

A vulnerability was found in bastianallgeier Kirby Webmentions Plugin and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is know...

CVE-2017-20174

A vulnerability was found in bastianallgeier Kirby Webmentions Plugin and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is know...

CVE-2017-20174

A vulnerability was found in bastianallgeier Kirby Webmentions Plugin and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is know...

Design/Logic Flaw

A vulnerability was found in bastianallgeier Kirby Webmentions Plugin and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is know...

CVE-2017-20174 bastianallgeier Kirby Webmentions Plugin injection

A vulnerability was found in bastianallgeier Kirby Webmentions Plugin and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is know...

CVE-2017-20174

CVE-2017-20174 involves the bastianallgeier Kirby Webmentions Plugin with an injection vulnerability in an unknown function. The issue can be triggered remotely and has high impact potential, with attack complexity described as high. A patch identified as 55bedea78ae9af916a9a41497bd9996417851502 ...

CVE-2017-20174 bastianallgeier Kirby Webmentions Plugin injection

A vulnerability was found in bastianallgeier Kirby Webmentions Plugin and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is know...

Kirby 注入漏洞

Kirby is a file-based content management system CMS. An injection vulnerability exists in Kirby Webmentions, which stems from a vulnerability found in the bastianallgeier Kirby Webmentions plugin, which affects unknown functionality, and can be manipulated to cause injections, which can be used t...

PT-2023-10625 · Bastianallgeier · Bastianallgeier Kirby Webmentions Plugin

Name of the Vulnerable Software and Affected Versions: bastianallgeier Kirby Webmentions Plugin affected versions not specified Description: A vulnerability was found in the bastianallgeier Kirby Webmentions Plugin, allowing for injection attacks. The manipulation can be launched remotely, but th...