PT-2026-103821
CVE-2026-103289
·
تاريخ النشر
2026-10-01
·
تاريخ التحديث
2026-10-13
الوصف من
CVSS 4.0
7.1
عاليةالمقاييسAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Ghost versions 5.9.0 through 6.44.0
Description
An input validation issue exists in the comments feature. This flaw allows authenticated members to access comments they are not authorized to view, leading to the disclosure of restricted comment data.
Recommendations
Update Ghost to version 6.44.1.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾