CVE-2023-26510

Name of the Vulnerable Software and Affected Versions Ghost version 5.35.0

Description The issue allows contributors to view draft posts of other users, which may be inconsistent with a security policy where a contributor's draft should only be readable by editors until published. The vendor does not consider this behavior to have a security impact.

Recommendations For Ghost version 5.35.0, consider restricting contributor access to draft posts of other users as a temporary workaround until a patch is available.