PT-2020-19970 · Ghost · Ghost Cms

CVE-2020-8134

Published

2020-03-20

Updated

2024-03-06

CVSS v3.1

8.1

High

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Ghost CMS versions prior to 3.10.0

Description A server-side request forgery (SSRF) issue allows an attacker to scan local or external networks or interact with internal systems.

Recommendations For Ghost CMS versions prior to 3.10.0, update to version 3.10.0 or later to resolve the issue.

Exploit

Fix

SSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

BIT-GHOST-2020-8134

CVE-2020-8134

GHSA-Q4H8-7QFF-GH6C

Ghost Cms