Threats tagged 'ghsa-4pvx-fwjj-8gpc'

A privilege management vulnerability in TryGhost Ghost allows staff users with Editor or Super Editor roles to assign their own role to Author and Contributor users, despite lacking permission to do so. This issue affects Ghost versions from 0.5.0 up to but not including 6.64.0. The vulnerability has a medium severity with a CVSS score of 4.3. Version 6.64.0 contains a fix that addresses this issue.