Threats tagged 'ghsa-322m-ff4g-9vx9'

A time-of-check to time-of-use (TOCTOU) race condition vulnerability in TryGhost Ghost versions 6.54.1 through 6.64.0 allows unauthenticated users to abuse certain functionality, such as Webmentions, to make limited HTTP requests to hosts within the Ghost server's internal network. The attack does not return response data. The issue is fixed in version 6.65.0.