Lucene search
Veracode Vulnerability DatabaseVERACODE:40471HistoryMay 11, 2023 - 3:49 a.m.
Information Disclosure
2023-05-1103:49:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
information disclosure
vulnerability
public api
brute-force attack
ghost software
0.001 Low
EPSS
Percentile
51.2%
ghost is vulnerable to Information Disclosure. The vulnerability exists because the library does not properly validate the public API endpoints when filtering, which allows an attacker to reveal private fields such as the author name via a brute-force attack.
References
Related
nvd
nvd
CVE-2023-31133
2023-05-08 21:15:11
osv
osv
Ghost vulnerable to information disclosure of private API fields
2023-05-03 21:57:10
BIT-ghost-2023-31133
2024-03-06 10:52:29
CVE-2023-31133
2023-05-08 21:15:11
github
github
Ghost vulnerable to information disclosure of private API fields
2023-05-03 21:57:10
cve
cve
CVE-2023-31133
2023-05-08 21:15:11
prion
prion
Design/Logic Flaw
2023-05-08 21:15:00
cvelist
cvelist
CVE-2023-31133 Ghost vulnerable to disclosure of private API fields
2023-05-08 20:56:39