logo

Database

Insecure file upload In ghost

Description

Arbitrary file upload in Ghost An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attackers to execute arbitrary code via a crafted file.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2022-283972. NVD-2022-283973. OSV-2022-283974. GCVE-2022-28397

References

1. https://ghost.org/customers2. https://ghost.org/docs/security/#privilege-escalation-attacks3. https://github.com/TryGhost/Ghost4. https://trends.builtwith.com/cms/Ghost5. https://youtu.be/PncfBetPk2g6. http://ghost.com

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.